lead-box.dev
ZH
联系

PDF — Privacy Policy

Effective date: 7 November 2026

This policy covers the Pagewright app for Android (package dev.leadbox.pdf) and the website https://pdf.lead-box.dev, which the app works with. It describes what actually happens to your files and data. It was written from the source code, not adapted from a template.

Who is responsible

Pagewright is operated by LeadBox. Questions about your data: privacy@lead-box.dev.

What the app accesses on your phone

  • The app requests only one permission: internet access.
  • It does not request access to your contacts, location, camera, microphone or phone storage.
  • It sees only the files you pick yourself through the standard Android file picker, or share to it.

Files you process

  • When you run a tool, the file you picked is uploaded to our server over HTTPS and processed there. Each job gets its own directory. The file tools run on our own server and do not send your document to any other company. Our servers do have internet access. The one thing that uses it for your content is the optional AI feature on the website, described below, and only after you allow it.
  • A file is deleted 24 hours after upload. A cleanup task runs every hour. You can delete a document earlier yourself, and it is then removed at once. You can also extend a document's storage. If you keep extending it, it stays until you stop.
  • Only you can access your documents. Every request is checked against the document's owner. A document that is not yours is answered as if it did not exist. We do not create shareable links.
  • Files are not encrypted at rest on our server. Tools must read a document to change it, so end-to-end encryption is not possible. The operator has administrative access to the server; only the retention period limits that.

What we keep about a job

  • While the file exists, the job record also holds the IP address and device/browser identifier the request came from, and the tool settings you chose. For text-input tools, those settings include the text you typed. Passwords you enter to open or protect a PDF are removed when the job finishes.
  • When the file is deleted, the IP address, device identifier and settings are erased from the record. What remains is the tool, the file name, size, type and a checksum. Signed-in users see this as their history.
  • The remaining record is deleted automatically: 30 days after the file for jobs without an account, 180 days for jobs in an account.

Account (optional)

  • You can use the tools without an account. If you create one, we store your name, your email address and your password, the password in hashed form only.
  • For each device you sign in on, we store a sign-in token (as a hash only), the device name and when it was last used.

Library and reading

  • Books you add to your library are stored on our server so they sync between your devices. So are your reading position, bookmarks and the notes you attach to them. They are kept until you delete them or your account.
  • The app also keeps your files, history and books locally on the phone. They are removed when you uninstall the app or clear its data.

AI features (website only)

  • The Android app has no AI features and sends nothing to AI providers.
  • The website has optional AI features: questions about a document, extracting fields from documents, and finding a tool from a description. They are switched off unless the operator has enabled them on the server.
  • When you use one, what it needs goes through our AI gateway to an external AI model provider: the extracted text of the document and your question, the text of the files you chose for extraction, or your description. Which provider handles a request depends on the gateway's routing. Those providers may be outside your country. Their own terms govern what they do with a request, and we cannot promise how long they keep it.
  • Document features ask for your permission first. Finding a tool sends only the description you typed, and the form says so.
  • Questions and answers are stored with the document and deleted with it. Our log records that a request failed, not its content.

Advertising, analytics and third parties

  • The app contains no advertising and no analytics or tracking SDKs.
  • We do not sell your data. Apart from the AI providers described above, when you choose to use those website features, we do not share it with anyone.
  • We count tool usage (event name, tool, time) with nothing that identifies you, your device or your file. These counts are kept for up to 180 days.

Logs

  • Our server log records which tool ran, for which job, how long it took and whether it succeeded. It does not record file names or file contents. If an email to you fails to send, the log records the address together with the error.
  • The log starts a new file every day. Files older than 14 days are deleted.

Deleting your data

Deleting an account removes the account, its documents, books, bookmarks, history, sessions and devices immediately. It does not wait for the retention periods above.

Children

Pagewright is not directed at children under 13, and we do not knowingly collect their data.

Changes

This policy changes when the app does. The effective date at the top will be updated, and material changes will be announced in the app or on the website.