Payslips, bank statements, ID cards, contracts, medical letters: the documents people convert and compress online are often the most private ones they own. Before you drop one into a free PDF website, it's worth knowing where it goes.
What usually happens when you use an online PDF tool
Most online converters work on a server. Your file is uploaded, processed on the company's computers, and the result is sent back for you to download. Reputable services encrypt the transfer and say they delete files after a few hours, but for that time your document sits on a computer you don't control, under the company's privacy policy and the laws of the country where its servers are.
Which documents deserve extra care
- Identity documents: passports, ID cards, driving licences.
- Financial papers: bank statements, payslips, tax returns.
- Contracts and anything covered by a confidentiality agreement.
- Medical and legal letters.
- Work documents your employer hasn't approved for outside services.
Questions to ask before you upload
- Is the file uploaded at all? Some tools, like GrovePDF, process files inside your browser instead.
- How long is it kept, and where? Look for a clear deletion period in the privacy policy.
- Is it used for anything else, such as training or analytics?
- Who runs the site? A real company name, address and contact details are a good sign.
Is a particular PDF site safe? Check it yourself
People often search for one site by name: is Online2PDF safe, is iLovePDF safe, is Smallpdf safe. We can't vouch for other companies, and their own privacy policies are the only reliable answer about what they do with files. But you can check any PDF website, including ours, in a couple of minutes:
- Read the privacy policy for three things: whether files are uploaded, how soon they are deleted, and whether they are used for anything else.
- Find the legal notice: a company name, a registered address and a way to contact a real person.
- Check the address bar: the site should use https, and the domain should be the one you meant to visit, not a look-alike.
- Test whether your file leaves your device: run the tool once on a harmless test file, so everything it needs is downloaded. Then, without closing the page, turn off Wi-Fi or mobile data and run it again. A tool that still works offline is processing files on your device; one that fails needs a server.
- Be wary of extras: a "converter" that asks you to install software, create an account for a single file, or allow notifications deserves a second look.
None of this makes a server-based tool unsafe: many are run carefully. It tells you where your document goes, so you can decide which files you're comfortable sending.
How GrovePDF handles your files
Every GrovePDF tool runs in your browser. When you merge, compress, convert or sign a PDF, the file is read and changed on your own phone or computer and never sent to our servers. The tool's own code and data (fonts, text-recognition files) are downloaded from our site when needed, but your document is not sent anywhere. Even the AI features and text recognition run on your device.
Extra protection for sensitive PDFs
- Redact PDF removes names, numbers or whole areas for good, not just covers them, before you share a document.
- Protect PDF adds a password with AES-256 encryption before you email it. Send the password by a different channel, such as a text message.
- Received a protected file you need to edit? Unlock PDF removes the password when you know it.
Whatever tool you use, keep your original file, and share sensitive documents only with the people who need them.