● ISO 32000-1, GDPR & HIPAA Compliant Zero-Upload Architecture

Privacy Policy — 100% Client-Side In-Browser Security

Effective Date: October 2026 • Last Reviewed: October 2026

1. The Zero-Upload Architecture (Core Privacy Invariant)

Unlike conventional online PDF converters (such as Smallpdf, iLovePDF, or Adobe Online) that require you to upload confidential documents to cloud infrastructure, CrispPDF executes 100% of all computations locally inside your web browser memory (RAM) using WebAssembly (WASM) and client-side JavaScript.

Your documents, signatures, biometric photos, marks cards, tax records, and passwords never travel over the internet, never touch any backend server, and are never saved to cloud storage.

2. Compliance With International Privacy Standards

  • GDPR (General Data Protection Regulation - Article 25): Implements strict Data Protection by Design and by Default. Since no personal data is collected or transmitted, data processing complies inherently with EU privacy regulations.
  • HIPAA Safe Harbor: Because medical records or Protected Health Information (PHI) are processed strictly in volatile local memory without network egress, healthcare professionals can safely format medical charts and test results.
  • UIDAI & Indian IT Act 2000: Satisfies local data residency and biometric confidentiality guidelines for Aadhaar card redaction and PAN card formatting.

3. Telemetry, Analytics & Cookies

CrispPDF uses standard, anonymized Google Analytics 4 (GA4) exclusively to measure aggregate page visits and technical performance (Core Web Vitals). GA4 is strictly prohibited from capturing filenames, document contents, passwords, or personal identity identifiers.

No tracking cookies are deployed. Local browser storage (localStorage) is utilized strictly for non-sensitive UI state: your dark/light theme preference and pinned favorite tools.

4. Data Retention & Automatic Memory Scrubbing

When you close or refresh your browser tab, all temporary memory allocations, canvas renderings, and decrypted file buffers are immediately purged by the browser engine's garbage collector. Zero persistence exists.

5. Contact Our Privacy Engineering Team

For questions or verification of our zero-upload WebAssembly architecture, reach out directly to Kuldeep Tiwari and the CrispPDF engineering team at contact@crisppdf.in.