You uploaded a PDF to an online tool. The file finished processing. How long does it sit on their servers? The honest answer varies from minutes to forever, depending on the vendor.
Typical retention periods
Common patterns:
- 1 hour: most reputable free tools. File deleted from processing servers after the user has a chance to download. - 24 hours to 7 days: tools that allow re-download or re-edit during a session. - 30 days: paid tools with user accounts holding file history. - Indefinite: tools that explicitly state files are retained 'for service improvement' — read the policy carefully. - Zero (browser-side): tools that process in your browser without server upload at all.
Reading the retention clause
In the privacy policy, look for terms like 'retention', 'storage', 'deletion'. Common red flags:
- 'We may retain files for analytics, training, or service improvement.' - 'Files are stored on our infrastructure indefinitely.' - 'You grant us a perpetual licence to your uploaded content.'
Green flags:
- 'Files deleted immediately after processing.' - 'No file content is stored on our servers.' - 'Processing happens entirely in your browser.'
Why retention matters
A file on a vendor's server is:
- Accessible to vendor staff with permissions. - Subject to subpoenas and government requests. - In scope for breach if the vendor is compromised. - Possibly training material if the vendor uses AI. - Backed up for the vendor's own retention period.
Each day a file persists is incremental risk. Shorter retention = lower risk.
Browser-side as the floor
If the vendor never uploads your file, retention isn't a question. The file is on your device only.
Flint processes in your browser. No file content reaches Flint's servers. Retention period for your PDF content: zero, because the content never arrives.
For sensitive material, browser-side is the safer architecture. For non-sensitive material, server-side with short retention is acceptable.
FAQ
Does Flint retain my PDFs?
No — Flint processes in your browser; file content doesn't reach Flint's servers. Anonymous usage telemetry may be collected, documented in the privacy policy.
Is 1-hour retention safe enough?
For most non-sensitive material, yes. For confidential or regulated material, prefer zero-retention browser-side tools.
Can I opt out of vendor retention?
Some vendors offer it; many don't. Check the privacy policy and terms; ask support if unclear.
What about backups?
Even with 1-hour retention, backups may persist for weeks. Browser-side tools avoid this entirely.
Shorter retention is safer. Zero retention is safest. Flint stays in your browser — your file content never arrives.