Sovereign Privacy & Data Security

Privacy Policy & Zero-Retention Guarantee

At PDFNepal, your privacy and document sovereignty are our highest priorities. We are engineered from the ground up with strict zero-retention guarantees, automated file purges, and enterprise-grade encryption.

Last Updated: September 2026 Nepal Privacy Act 2075 & GDPR Compliant
Zero File Retention

Files are automatically purged within 1-2 hours or instantly upon clicking delete.

No AI Training

Your files, text, and CV data are never used to train or refine machine learning models.

TLS 1.3 Encryption

End-to-end cryptographic encryption in transit prevents eavesdropping and data tampering.

No Data Selling

We never sell, broker, or monetize your personal identity or document contents.

Policy Navigation
100% Free & Open Document Processing
01

Overview & Commitment

PDFNepal (“we”, “our”, or “us”) operates the online PDF utility suite, OCR tools, and CV Maker accessible at pdfnepal.com. We believe that privacy is a fundamental human right. Our tools are engineered to empower individuals, students, legal professionals, developers, and businesses in Nepal and across the globe with sovereign, high-speed document utilities without intrusive data harvesting.

Our Core Privacy Promise: We do not inspect, read, sell, rent, or share the contents of your documents with any third parties or advertising networks.
02

Document & File Processing Lifecycle

When you use our online PDF tools (such as Merge, Split, Compress, Convert, OCR, or Watermark), your files go through a secure, automated lifecycle:

1
Encrypted Ingestion

Uploaded files are transferred over TLS 1.3 encrypted channels directly into isolated temporary processing directories.

2
Automated Execution

Our backend execution engines process your request (e.g., merging pages, OCR text extraction, or compression) entirely programmatically without human inspection.

3
Automated Purge & Deletion

Output files are stored temporarily for download. Our automated background sweepers permanently delete both source and processed files within 1 to 2 hours. You may also click the "Delete Now" button on any tool result screen to trigger immediate zero-trace eradication.

03

Information We Collect

We adhere to the principle of Data Minimization. We collect only what is strictly required to provide our services:

Account Information

If you create an account or sign in with Google OAuth, we store your full name, email address, and encrypted credentials to manage your account and save your CV Maker drafts.

Technical & Diagnostic Logs

Basic anonymized telemetry such as IP address (for rate limiting against DDoS abuse), browser user-agent, operating system, and tool success rates. Logs contain no document contents.

04

How We Use Your Information

  • To execute document conversions and tools: Converting, merging, compressing, or formatting your requested PDF tasks.
  • To maintain account features: Saving your CV Maker drafts, user profile, and authentication sessions.
  • To secure our infrastructure: Enforcing rate limits, preventing automated script spamming, and ensuring high server availability for all users in Nepal and globally.
  • To communicate service updates: Sending transactional verification emails (OTP codes, password reset links) when requested by you.
05

CV Maker & Resume Privacy

Our CV Maker is built with user privacy and local control in mind:

  • Guest Users: Your resume data is cached locally in your browser session (sessionStorage) and session cache. It is private to your device.
  • Registered Users: Your saved CV documents are encrypted in our sovereign database under your unique user ID and accessible only by you.
  • Typst Vector Compilation: High-resolution vector PDF rendering happens in an isolated container and the resulting binary is sent directly to your browser.
  • Full Deletion Control: You can delete any saved CV from your "My Saved CVs" dashboard at any time, instantly wiping it from our database.
06

Security & Encryption Standards

TLS 1.3 Transport

All data in transit is encrypted using modern cryptographic ciphers.

PBKDF2 Password Hashing

Passwords are salted and securely hashed; plain text is never stored.

Isolated Sandboxes

File rendering and OCR tools execute in isolated memory processes.

07

Your Rights & Data Control

Under applicable data protection laws (including Nepal's Individual Privacy Act, 2075 and GDPR), you hold clear rights regarding your data:

Right to Access: View and export any saved resumes or profile details.
Right to Rectification: Update your profile or credentials anytime.
Right to Erasure: Delete any saved document or request full account deletion.
Right to Restrict: Opt out of optional performance telemetry.
08

Cookies & Google AdSense Advertising Policy

To maintain our infrastructure, server compute, and offer 100% free document utilities to users across Nepal and internationally without subscription paywalls, PDFNepal partners with third-party advertising networks, including Google AdSense.

Third-Party Vendors & Google AdSense Disclosures
  • Use of Advertising Cookies: Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites across the internet.
  • DoubleClick DART Cookies: Google's use of advertising cookies (including DoubleClick DART cookies) enables it and its partners to serve ads to our users based on their visit to PDFNepal and/or other sites on the Internet.
  • Opting Out of Personalized Advertising: Users may opt out of personalized advertising at any time by visiting Google Ads Settings (https://adssettings.google.com). Alternatively, users can opt out of a third-party vendor's use of cookies for personalized advertising by visiting aboutads.info or the Your Online Choices portal.
  • Zero Document Inspection by Advertisers: Google AdSense and third-party advertising partners NEVER have access to your uploaded files, converted documents, CV drafts, or document text. Advertisers only receive standard browser telemetry and non-personally identifiable ad request data.
Summary of Cookies Deployed on PDFNepal
Cookie / Vendor Category Purpose Duration
.AspNetCore.Identity.Application Essential Authenticates logged-in user sessions securely. Session / 14 Days
PDFNepal_CvSessionId Functional Isolates guest CV Maker drafts so you don't lose progress. 30 Days
__RequestVerificationToken Security Anti-forgery token protecting against CSRF attacks. Session
__gads, __gpi, IDE, DSID (Google) Advertising Google AdSense ad frequency capping, non-fraud detection, and personalized ad serving. Up to 13 Months
_ga, _ga_* (Google Analytics 4) Analytics Anonymized performance metrics, page visits, and tool usage tracking. Up to 24 Months
09

Frequently Asked Questions

Yes, 100%. All uploads are processed over encrypted channels and stored in temporary, isolated directories. No human ever inspects your files, and they are automatically purged within 1-2 hours or immediately when you click "Delete Now".

No. We strictly never use any customer files, OCR scans, or resume contents to train, fine-tune, or feed machine learning algorithms.

Yes. PDFNepal is engineered specifically to meet the high privacy expectations of Nepali citizens, corporate enterprises, banks, and legal practitioners. Whenever possible, our client-side tools run directly in your browser without sending files to the server.