Privacy and storage
Where your files go, what superPDF stores in your browser, and how to remove it.
Where your files go
superPDF works on your documents inside your browser. The tools don’t upload your files, and there’s no account. Only two things can send anything out, and only when you use them: AI with your own API key, which sends document text to the provider you chose (see AI features), and sharing, coming soon, which will send an encrypted copy superPDF can’t read (see Sharing).
What is stored in your browser
| Data | Why |
|---|---|
| Documents you open, and their earlier versions, encrypted | So they appear in My documents and Version history |
| Theme, saved workflow steps, typed signature name | To remember your preferences |
| Activity: tool names and completion times | For the Activity screen. Document contents aren't recorded. |
| Your AI key, encrypted, if you add one, and your saved chats, encrypted | So you don’t have to enter the key again, and can reopen a chat |
| AI models, if you download them | So the AI tools can run on your device. See AI features. |
None of this leaves your browser, and it isn't shared between devices or browsers.
Saved documents, their earlier versions and their names are encrypted with a key that stays in this browser. This protects copies of the browser’s data, such as backups, but not someone who can use this browser profile.
Usage counts
superpdf.ai counts visits and which tools are used, with Umami running on superPDF's own server. It uses no cookies and stores no personal data. When you run a tool, only the tool's name is counted, never your file names or document contents. If your browser sends Do Not Track, nothing is counted.
Clear your data
Open Settings in the app and select Remove all documents. Clearing your browser's site data for superpdf.ai removes everything else. If only part of it is cleared and the key goes, documents saved with that key can't be read again; My documents says so and offers to remove them.
Sharing
Share PDF link, PDF comments and Request signatures are coming soon. They will send documents to other people end-to-end encrypted:
- Your browser encrypts each shared PDF, its name and your message with a new key before anything is sent. Comments and signed copies are encrypted the same way.
- The key is the part of the link after
#, which browsers never send to a server, so superPDF stores only encrypted data it can’t read. - Everything is deleted when the link expires (after 1 hour to 7 days, as you choose), when you revoke it, or right after the first download of a one-time link.
- There are no accounts, and requests aren’t logged.
The link is the key. Anyone who has the link can open the document until it expires, so send it only to the people it's meant for. superPDF can't recover a lost link. It can see when an item is uploaded and downloaded and how big it is, but not what it contains or who it is for.
AI features
Each AI tool can run with a model on this device or with your own API key from an AI provider. You choose once, in Chat with PDF, and the other AI tools and PDF agents use the same choice.
- On this device: the model runs in your browser. Your documents, questions and answers aren’t sent anywhere.
- With your own API key: the document text a tool needs, your question or request, and any notes or field names you type go from your browser straight to that provider, under its terms, never through superPDF. Chat with PDF sends the whole document when it fits (about 120,000 characters), otherwise the sections most likely to answer. Invoice data extraction, PDF to JSON, AI form filler and the Summarize and Review steps of PDF agents send up to about 60,000 characters, otherwise the passages that match best. The other AI tools send the text they read. To plan steps, agents send your request, the document names and the start of each page.
Finding tables in Extract tables from PDF, the mind map in PDF to mind map, and every tool outside PDF AI and PDF Agents use no AI. Document operations that agents run, such as merging or redaction, happen in your browser either way.
Nothing is downloaded until you select Download in On-device AI models. Then your browser downloads:
| File | Size | From |
|---|---|---|
| The model you choose: Gemma 4 E2B, or the smaller Qwen3 0.6B | About 2 GB, or 580 MB (930 MB on some graphics processors) | Hugging Face (huggingface.co and hf.co). No account is needed. |
| The software that runs the models | About 30 MB | superpdf.ai |
Hugging Face receives an ordinary download request from your browser, which includes your IP address and browser details, as any website does. It never receives your documents. After the download, the AI tools read the files from your browser's storage and request nothing.
To remove the models, select Delete in On-device AI models, or clear your browser's site data for superpdf.ai.
Voice and transcription
PDF to audio and Transcribe audio to text use their own models, which also run in your browser. Each tool says what it needs and downloads nothing until you select Download:
| File | Size | From |
|---|---|---|
| PDF to audio: the voice model, six American English voices and pronunciation data | 338 MB for the faster version, or 105 MB for the smaller one | Hugging Face |
| Transcribe audio to text: the speech model for Standard or Accurate | Standard: 209 MB (faster) or 80 MB (smaller). Accurate: 252 MB | Hugging Face |
Your PDFs and recordings are never sent anywhere by these two tools.