Skip to main content

Privacy Policy

Last updated:

Overview

leafbind is designed to be minimal by default. We do not create accounts, we do not store your email address unless you complete a payment, and we do not use tracking cookies. This page explains exactly what we collect and why.

Analytics — Plausible

We use Plausible Analytics, a privacy-focused analytics tool. Plausible does not use cookies, does not track users across sites, and does not collect personally identifiable information.

What Plausible collects per page view:

  • — Page URL visited
  • — HTTP referrer (the site you came from, if any)
  • — Browser type and operating system (derived from the User-Agent string; the raw string is not stored)
  • — Country of origin (derived from IP address at request time; the IP address itself is not stored)
  • — Screen size category

What Plausible does NOT collect: no IP addresses, no cookies, no cross-site tracking, no fingerprinting, no PII of any kind. Data is aggregated and never sold.

Payments — Stripe

Credit pack purchases are processed by Stripe. leafbind does not receive or store your card number, CVC, or billing address — those stay with Stripe.

If you complete a purchase, Stripe shares your email address with us for the purpose of delivering your credits and for support follow-up (for example, if a refund is requested). We do not use that email address for marketing, and we do not share it with third parties beyond what is required to operate the service.

Stripe's own privacy practices are described in the Stripe Privacy Policy.

Uploaded files

Files you upload to leafbind are used solely to perform the conversion you requested. They are stored temporarily in an isolated job directory on our server and deleted automatically once the job's retention window expires:

  • — Free tier: source file and output are deleted 1 hour after the job is created.
  • — Premium tier: source file and output are deleted 24 hours after the job is created.

We do not retain your files beyond these windows, do not use them for training, and do not share them with third parties except as described in the AI services section below.

AI services (premium tier only)

The premium conversion pipeline may send portions of your uploaded PDF to two external AI services for processing:

  • — Google Gemini — used for OCR remediation on pages where text-extraction libraries (pdfminer, pypdf, PyMuPDF) fail to produce usable output, typically scanned pages or complex graphical layouts. Only affected page images are sent.
  • — Anthropic Claude — used for the post-conversion visual quality-assurance pass, which re-renders the output and checks heading hierarchy, table-of-contents accuracy, and footnote rendering. Only output page images are sent, not the original source content.

The free tier does not use AI services. Content is not submitted to these services for training. Both services are used under API agreements that restrict data use to providing the requested service.

Cookies and local storage

leafbind does not use cookies. We do not show a cookie consent banner because there is nothing to consent to.

Your browser's localStorageis used to store the anonymous job token(s) associated with your current conversion or token pack. This is stored on your device only — it is never transmitted to our servers beyond what is needed to check job status and recover tokens. You can clear it at any time by clearing your browser's site data.

No accounts

leafbind does not require account registration. We do not collect a username, password, or profile. The service is designed to work without persistent identity — your token pack is the only credential.

Your rights and contact

Because we hold minimal data, most privacy requests are straightforward to fulfil. If you have questions about what we hold, or want to request deletion of any data associated with a Stripe purchase, contact us at:

[email protected] or via the contact page.

Changes to this policy

If we make material changes to this policy, we will update the “Last updated” date at the top of this page. Continued use of the service after a change constitutes acceptance of the updated policy.