Privacy Policy

Last updated July 28, 2026

This page explains exactly what does and doesn’t leave your Mac, and what PDF Go’s servers store when it does.

What stays on your Mac, always

Viewing, highlighting, drawing, adding notes, filling forms, redacting, and signing all happen entirely on your device. None of that is uploaded anywhere, ever — it’s written straight into the PDF file on your Mac.

What happens when you ask the AI assistant a quick question

The specific text you’re asking about is sent to generate an answer — either to PDF Go’s own built-in AI (a shared service we operate, using our own provider accounts), or directly to your own AI provider account if you’ve added your own API key in Settings. If you’re using your own key, that traffic goes straight from your Mac to your chosen provider and we never see it. If you’re using PDF Go’s built-in AI, that request passes through our server to reach the model provider, and we keep a short-lived operational log of the request (see “Server logs” below).

What happens when you add a document to AI-powered search

For document-wide search, chat, and summarization across a whole PDF, PDF Go extracts the text (using on-device OCR for scanned pages) and computes the search index for that document (“embeddings”) entirely on your Mac. A copy of the PDF and that computed index are then uploaded to PDF Go’s servers so the app can search and answer questions about that document later. This is different from a quick one-off question above: the document itself is stored on our servers for as long as it stays in your library, tied to your license.

Account data

Signing in (email/password, Google, or an emailed sign-in link) creates an account with your email address, and your name if you provide one. We also store which devices have activated a license (a device identifier, not tied to any personal information beyond your account), and your subscription/license status.

Server logs

Our servers keep operational logs for security and reliability — things like IP address, browser/device user-agent, and timestamps for sign-ins, device activations, and API requests. These exist to prevent abuse (e.g. rate-limiting repeated failed sign-ins), debug problems, and maintain an audit trail; they are not used for advertising or shared with data brokers.

What this website collects

This site doesn’t use advertising trackers or third-party analytics scripts. When you buy a subscription or license, payment is handled entirely by Stripe, which collects your payment details and billing email directly — we receive only your email address, purchase type, and payment status.

What we don’t have

Deleting your data

There’s currently no self-service delete button. Email us (below) to request deletion of your account, uploaded documents, or both, and we’ll confirm once it’s done.

Contact

Questions about this policy, or a deletion request: hello@pdfgo.onfred.tech.