WEB / PDF

A local workflow for your document.

Select your fileThe original on your device
Process in your browserNo document upload to a server
Download your copyPreview and output on your device

This flow describes web PDF tools. Optional Online AI and diagnostics in the Android app have separate data flows, explained below.

WEB / PDF

Local document processing

Web PDF tools process your files in your browser. Documents are not uploaded to or stored on our servers.

ANDROID / ONLINE AI

Optional Online AI

Off until you enable it. When used, the selected text, document title, your question or page images are sent over HTTPS through the ZoriaPDF API to Z.ai, which processes them on our behalf and does not store them. Crash reports and usage statistics can be switched off in Settings → Diagnostics.

Web tools

Your files stay in your browser for web tools.
No server upload for local PDF operations.
No document storage.
No tracking cookies.

How local processing works

PDF operations run with browser-side libraries where currently implemented.
Preview and export are prepared on your device.
Temporary document data is kept only for the current browser session.
Closing the tab clears the working state held by the page. The site remembers only your theme choice in your browser's local storage.

Services

Cloudflare Pages serves the website files.
The website does not use server-side document processing.
Fonts and static assets support the interface only.
We do not add analytics, trackers, or marketing cookies to the website.

Android app: what stays on your device

No account, no sign-in, no ads, no in-app purchases.
All PDF tools run on your phone: view, merge, split, rotate, compress, page numbers, watermark, protect/unlock, signature, annotation, images to PDF, PDF to images, and the scanner's crop and filters.
Your documents, your signature, your recent-files list, your AI history and your settings are stored only in the app's storage on your device. We cannot see them. You can clear AI history in Settings, and uninstalling the app deletes all of it.
The app turns off Android cloud backup, so this data is not copied to your Google backup.
Camera — only when you choose to scan a page or take a photo for a PDF or a signature. Photos are processed on your device.
Files / storage — only to open files you pick, files you share to ZoriaPDF, and to save results where you choose. (Older Android versions show this as "USB storage".)
Internet — only for the optional features below.

Android app: optional Online AI (summaries, questions, translation, quiz, reading scanned pages)

Online AI is off until you turn it on. Before the first use the app shows a consent screen that names the provider and asks for your permission. You can turn it off any time in Settings → AI & Privacy.
What is sent, and only when you start an AI action: the text of the document you chose (up to the amount needed for that action), the document's title, and what you type (for example your question, or the target language). For a scanned PDF or a scanned page, page images are sent instead of text (for a scanned PDF, up to the first 12 pages, one page per request).
Where it goes: over HTTPS to our server api.zoriapdf.com (a Cloudflare Worker), which forwards it to our AI provider Z.ai (JINGSHENG HENGXING TECHNOLOGY PTE. LTD., Singapore) and returns the answer to the app.
Storage: our server does not save the text, images, questions or answers, and does not log them. It handles them only in memory for that request. Z.ai processes API content on our behalf as a data processor and states that it does not store API inputs or outputs. See Z.ai's terms: https://docs.z.ai/legal-agreement/privacy-policy
Abroad: Z.ai's servers are outside Türkiye and the EU (generally Singapore), so this content is processed abroad. This is why we ask for your explicit consent first.
Abuse limits: to keep the free service working, our server counts requests per IP address. The counters are kept in Cloudflare for at most about 25 hours and are then deleted automatically. They contain no document content.

Android app: crash reports (Sentry) — optional, you can turn them off any time

Nothing is sent before you have seen the privacy screen on first launch. On that screen crash reports are switched on by default; you can switch them off there, or at any time later in Settings → Diagnostics. When off, the crash-report service is not started and nothing is sent.
Legal basis: our legitimate interest in finding and fixing crashes and keeping the app stable. Crash reports are optional, and switching them off is how you object.
What is sent when the app crashes or hits an error: the error and stack trace, app version, Android version, device make and model, memory figures, and the last in-app steps (screen changes and event names such as "app opened"). The service also uses a random installation ID and records app sessions to count how many users are affected and how stable a release is.
What is not sent: document content, file names, file paths, AI text, screenshots, your name or e-mail. The app strips paths and file names from error messages before they leave the device.
Who receives it: Sentry (Functional Software, Inc.), as our service provider, stored in its EU data centre in Germany.
How long: Sentry deletes crash data automatically after its retention period (90 days at most).

Android app: usage statistics — off by default, you can turn it on

Usage statistics are off unless you switch them on, on the first-launch privacy screen or in Settings → Diagnostics.
What is sent when on: event names such as "app opened", which main tab you opened, "PDF opened" with its page count, and which AI action was used or failed (and, for quizzes and scans, the number of questions or pages). Each event carries a random session ID that changes every time the app starts.
What is not sent: document content, file names, your IP address is not stored, no advertising ID, no device ID, no account.
Who receives it: our own analytics service (platform.zoriasoft.com, run on Cloudflare).
How long: events are deleted automatically after 90 days.

Android app: feedback by e-mail

The Feedback screen opens your own e-mail app with a pre-filled message (your text, rating, app version, platform and language). Nothing is sent unless you press send in your e-mail app. We use the e-mail only to answer you and to fix problems.

What we never do

We do not sell or rent your data.
We do not show ads or use advertising IDs.
We do not use your documents to train AI models, and our AI provider's API terms say it does not store them.
We do not build user profiles.

Your rights (KVKK / GDPR)

Under Turkish law No. 6698 (KVKK) and, where it applies, the EU GDPR, you can ask what data we hold about you, ask for it to be corrected or deleted, object to processing, and withdraw consent at any time. Withdrawing consent is as easy as switching the setting off in the app.
Because the app has no accounts and the data above is not linked to your name, we usually cannot find "your" records without your help. Section 11 explains how to ask us to delete data.
Legal bases: your consent (Online AI and usage statistics, which you can switch off at any time), and our legitimate interest in keeping the app stable (crash reports, optional and can be switched off at any time in Settings → Diagnostics) and in keeping the free service secure and working (abuse limits).
If you are not satisfied with our answer, you may complain to the Turkish Personal Data Protection Authority (KVKK Kurumu) or your local data protection authority.

How to request deletion

Send an e-mail to zoriasoft@proton.me with the subject "Data deletion request". You do not need an account, and we do not ask for ID documents.
To help us find the data, tell us roughly when you used the app, your device model and app version, and, for feedback e-mails, the address you wrote from.
A request covers the crash reports held by Sentry, the usage statistics events, and any feedback e-mails you sent us. We reply within 30 days. If we cannot match any data to you, we tell you, and the automatic deletion periods above (90 days at most) still apply.
Data on your device is deleted by you: clear AI history in Settings, clear the app's data in Android settings, or uninstall the app. Online AI content is not stored by us, so there is nothing to delete, and abuse-limit counters are deleted automatically within about 25 hours.
To stop future collection, switch crash reports and usage statistics off in Settings → Diagnostics and Online AI off in Settings → AI & Privacy.

Children

ZoriaPDF is a general productivity tool and is not directed at children under 13. We do not knowingly collect personal data from children.

Changes to this policy

When the app's data practices change, we update this page and the effective date above. Material changes to Online AI are also shown in the app, and you are asked for consent again.

Questions

Your documents stay yours

Because documents are not stored on our servers, there is no server-side document copy for us to delete.

Use the website tools and the Android app without creating an account.
Clear browser data or the app's data whenever you want.
Contact zoriasoft@proton.me for privacy questions and requests.

Data controller: ZoriaSoft (Mehmet Cuma Bozoğlan), Antakya / Hatay, Türkiye — zoriasoft@proton.me

Open Web Tools zoriasoft@proton.me