Muhtasari wa usalama
20 tools run entirely in your browser: the file never leaves your device. The other 20 tools upload to private storage in London over HTTPS using short-lived signed links; nothing else can read the files.
Server files are deleted 1 hour after processing on Free and within 2 hours on paid plans, or at once with Delete now. A cleanup job runs every 5 minutes, and a storage rule removes anything older than a day as a safety net.
Files are processed automatically. Staff can see file names and sizes in the admin console, never content. Files are never used to train AI models.
There are two exceptions to the 2-hour rule: Send for signature and the cloud library. Send for signature: A document you send for signature is encrypted by the app as soon as it is uploaded (AES-256-GCM with a random IV for every file; the key is held in the server configuration, never in the database or file storage) and is only ever decrypted in memory to show it to you and your signers and to build the signed copy. The signed PDF is encrypted the same way. Files are kept until every signer has finished plus 30 days, then deleted with the agreement’s records; drafts are deleted after 7 days without changes; a declined, cancelled or expired agreement loses its files and personal data at once. You can delete an agreement at any time. Signing links are unique, stored only as a hash, and stop working when an agreement is cancelled, expires or is deleted.
The cloud library is the second exception, and it is off until you turn it on. Each file you put in it is encrypted on our servers before it is stored (AES-256-GCM with a new random key for every file and version; those keys are themselves encrypted with a library key held in the server configuration, never in the database or file storage) and decrypted only to send it back to you. The database holds file names, sizes and folders, never file contents. Files are kept until you delete them: deleted files stay in the Bin for 30 days and are then deleted for good, and uploads that are not finished within 30 minutes are removed. Turning the library off, or deleting your account, deletes its files.
Macaaw Scan keeps your scans on your device, in the browser’s private storage for this site, and never in the app’s offline cache. A scan leaves the device only when you choose a cloud feature, and the app asks first. Scanner server tools (clean-up, reading receipts, Word export) follow the deletion rule above, and the app deletes each job as soon as its result is back. Questions about a document send only its recognised text and your question to our AI provider, which keeps nothing; images are never sent. OneDrive and SharePoint exports go straight from your device to Microsoft and never pass through our servers.