In short
- Most tools run on your device. Your file is processed inside your browser and is not sent to any server.
- A few tools need our server, and they are clearly labeled. With these, your file is sent to our server over an encrypted connection, processed, and deleted right after processing.
- Summarize PDF and Translate PDF use AI: the text extracted from your file is sent to a third-party provider for processing, and we don't keep the file or the text after processing.
- We don't log the contents or names of your files, and we don't use them to train any system or for any other purpose.
- Request signatures is a clear exception: we keep the document and signer details until the request is completed or you delete it, because it passes through several people.
- Our analytics are our own and built for privacy: we never store your raw IP address, and we currently use no advertising cookies or third-party tracking cookies.
- An account is optional. You don't need one to use the tools.
Who we are
Safha is a service provided by akkadX LLC, a company registered in Wyoming, United States. We are responsible for the data described in this policy. For anything privacy-related, contact [email protected].
Your files
Tools that run on your device
These tools carry an "On your device" badge. When you pick a file, it is read and processed inside your browser, and you download the result from the browser itself. The file never leaves your device and nothing from it reaches us.
Tools that use our server
Some tools need software that doesn't run well in a browser, such as Office conversions, OCR and background removal. In some other tools only one specific option uses the server, such as the Strong level in Compress PDF. We say so on the tool, or next to the option, before you choose your file.
When you use these tools:
- Your file is sent to our conversion service over an encrypted connection (HTTPS).
- The file is processed and the result is sent back to you.
- Temporary files are deleted right after processing, whether the job succeeds or fails.
We don't log the contents of your files, keep copies of them, look at them, or use them to train any system or for any purpose other than doing what you asked.
AI tools: Summarize PDF and Translate PDF
These tools use AI: the text is extracted from your file and sent over an encrypted connection to a third-party AI provider for processing. We don't keep the file or the text after processing.
- What is sent to the provider: the text extracted from your file, and the options you chose, such as summary length or target language.
- The provider is independent of us and handles the text under its own terms. That's why we recommend not using these tools for highly sensitive documents, such as official IDs or medical reports.
- AI output can contain mistakes, so review it before you rely on it.
Usage statistics
We want to know which tools are useful and which need fixing, without tracking you. So we run our own analytics, stored in our own database and not sent to any advertising or third-party analytics company. We collect:
- A hashed token instead of your IP address: we turn your IP address into a token using a secret value (a salt) that changes every day, and we never store the address itself. Because the salt changes daily, your visits on different days can't be linked through this token.
- Country: taken from a header added by the content delivery network (CDN) or proxy the site runs behind. We don't determine your city or precise location.
- Device, browser and operating system type.
- The referring site and the pages you visit.
- Tool usage events: the tool name, whether it ran on your device or on the server, whether it succeeded or failed, how long it took, and an approximate size range (for example "1 to 5 MB"). We never record file names or contents.
Technical logs and security
Like any website, our servers and our CDN may keep short-lived technical logs, such as IP address, request time and the page requested, to run the service and protect it against attacks and abuse. These logs don't include the contents of your files, and we don't use them to build a profile of you.
Your account
An account is optional. If you create one, we store:
- Your email address.
- Your password, only as a bcrypt hash, so neither we nor anyone else can read it.
- Your account role, such as regular user or administrator, and its status.
- A signed session cookie that keeps you signed in.
Site administrators can ban accounts that abuse the service, for example by trying to disrupt it or using it for illegal activity.
Some features need an account, such as saved workflows and signature requests.
Saved workflows
If you create a workflow that chains several tools, such as merge, then compress, then add page numbers, we save its settings in your account: the tools, their order and the options you chose. We don't save the files that pass through a workflow. Each step follows its own tool's rule: on-device steps run in your browser, and server-step files are deleted right after processing.
Request signatures
This feature lets you ask other people to sign a document by email. Because a request passes through several people and can take days, this is the feature where we keep a document on our server for a while.
- What we store: the document you uploaded, the signers' names and email addresses as you entered them, an audit trail showing the time of each action (such as opening the request or signing) and the email that took it, and then the final signed document.
- Emails: we send each signer an email with their own link to sign in the browser.
- Who can access the document: you, and the signers you added, through the links sent to them. We don't use the document for anything other than carrying out the request.
- How long we keep it: until the request is completed or you delete it.
If you received a signing email from us, it's because the person who sent the request entered your name and email. For any question about your data in a signature request, email [email protected].
Cookies
We currently use only two kinds:
- Session cookie: strictly necessary for signing in, and only set if you sign in.
- Language preference cookie: remembers whether you prefer Arabic or English.
We currently use no advertising cookies and no third-party tracking cookies. Full details, including how to delete cookies, are on our cookie policy page.
The installable app
You can install Safha as an app on your computer or phone. Your browser then saves the site's own files, such as pages and code, in a cache on your device (the Service Worker cache), so on-device tools keep working offline once loaded. This cache doesn't store your files, and you can remove it by uninstalling the app or clearing the site's data in your browser settings.
What we don't do
- We don't sell your personal data.
- We don't show ads targeted at your activity.
- We don't share your data with advertisers.
Who we may share data with
We rely on technical service providers to run the site, such as hosting and content delivery. They process data on our behalf and only to run the service. We may also disclose data if the law requires it, or to protect the service and its users against fraud and abuse.
In Summarize PDF and Translate PDF, the text extracted from your file is sent to a third-party AI provider, as explained above. For signature requests, we use an email provider to send signing links to signers.
Data may be processed and stored in countries other than yours, depending on where our service providers' servers are located.
How long we keep data
- Your files in server tools: deleted right after processing.
- Text in AI tools: we don't keep the file or the text after processing; the provider handles it under its own terms.
- Signature requests: the document, signer details and audit trail are kept until the request is completed or you delete it.
- Workflows: their settings are kept with your account until you delete them or your account.
- Statistics: kept in aggregated form or as hashed tokens that don't reveal IP addresses; details we no longer need are deleted.
- Technical logs: kept for a limited time for security and to run the service.
- Accounts: kept until you ask us to delete them.
Your rights and deleting your data
You can ask us to access or correct your account data, or to delete your account and its data. Email [email protected] from the address registered to your account and we'll handle your request. We may ask you to confirm that you own the account first.
We will never ask for your password, by email or any other way.
Security
We use an encrypted connection (HTTPS) across the whole site, store passwords only as hashes, and delete server-tool files right after processing. No method of protection on the internet is perfect, but we design the service so that as much of your work as possible stays on your device in the first place.
Children
The service is not directed at children under 13, and we don't knowingly collect personal data from them. If you learn that a child has created an account, contact us and we will delete it.
Changes to this policy
We may update this policy when we add tools or features or when the way the service works changes. We will change the "last updated" date at the top of the page, and if a change is significant we will point it out clearly on the site.
Contact
For any privacy question or a request about your data:
akkadX LLC, Wyoming, United States Email: [email protected]