# PDFEditorZone — Privacy approach (draft)

**This document is a planning draft, not legal advice or a final privacy policy.** Confirm actual data flows and applicable law before launch.

## Current starter
The included browser-side features attempt to process files in the user's browser. The site has no configured upload server, account system, analytics, AI API, or persistent document storage. Third-party CDN resources are loaded to run the PDF engine. This does not itself establish a production-grade privacy guarantee.

## Before public launch
Publish an accurate policy that explains:
- Which features process locally and which send documents to servers or providers.
- What files, technical data, and logs are collected, why, and by whom.
- Retention and deletion timelines, including backups and failures.
- Third-party subprocessors and geographic processing regions.
- Security controls, incident contact, user rights, and support channel.
- Cookie/analytics practices and consent requirements where applicable.

Do not log document contents, extracted text, OCR results, prompts, or signature material. Establish automatic cleanup and test it. Never claim immediate deletion unless verifiable.