What we collect from the upload Only the file you send, for as long as needed to process and return it. No additional data from the file is extracted, indexed, or sent to any third party.
Where we process Rollin Host's own infrastructure, in international Tier III datacenters (Europe and US). The upload goes through temporary storage (Vercel Blob) with automatic deletion right after processing. We do not use third-party conversion APIs (smallpdf, Adobe, etc.). Processing complies with the LGPD, with safeguards for international data transfer (Art. 33).
How long we store it Only as long as needed to process. The file sits in temporary storage during upload and in server RAM during processing (a few seconds), with automatic deletion right after you download the result. It never goes to backup, and we never log the content.
What gets logged Operational logs without content: call timestamp, IP hash (anonymized), operation name (e.g., "merge"), file size, HTTP response code. Retention: 30 days, for debugging and security. None of your personal metadata goes into these logs.
Cookies and tracking No third-party cookies in this tool. The main site uses first-party cookies for the theme (dark/light) and anonymous Google Analytics only if you consent in the CMP banner. Tool pages work even without accepting any cookies.
Legal basis (LGPD) Processing happens under the basis of performance of a service requested by the data subject (Art. 7, V, of the LGPD). Since you submit the file voluntarily for processing, this is the most direct basis possible — no additional consent needed.
Your rights Since we don't store your content, there is no data to access, correct, or delete after processing. You get the LGPD rights (Art. 18) by default. Questions or requests: dpo@rollinhost.com.br (Rollin Host DPO).