Security & Privacy

On hardened servers in the European Union. Files are encrypted in transit via TLS 1.3 and stored in isolated worker namespaces with strict access controls. They are automatically deleted within 1 hour.

No. We never use customer documents to train AI models. Our AI features (Chat with PDF, Summarize) process your file at request time and discard the content immediately afterward. No retention, no aggregation, no training pipeline.

No. Deleted files are permanently removed from disk and cannot be recovered. This is intentional — we want files to be unrecoverable so they can't be subpoenaed or stolen. Always download the result before closing the tab.

Yes. All servers are in the EU. We process personal data only as needed to deliver the service. You can request deletion of your account and any associated data at any time. We're a European company subject to GDPR and not bound by the US CLOUD Act.

TLS 1.3 in transit (with modern cipher suites). At rest: ext4 over LUKS2 with AES-256-XTS. Database fields containing sensitive data are hashed with bcrypt or AES-256. PDF passwords (for Protect PDF) use AES-256.

Yes — Business tier customers can request a DPA. Email hello@konomic.io with your company name and use case. We respond within 2 business days with a signed DPA.

Dashboard → Settings → Account → "Delete Account". This permanently removes your account and all files within 30 days. Active subscriptions are canceled. This is irreversible.

Never. We don't sell, license, or share customer files or metadata with anyone. Our revenue comes from paid subscriptions, not from monetizing user data.

Yes. All payments are processed by Stripe, a PCI-DSS Level 1 certified payment processor. We never see or store credit card numbers — your card details go directly to Stripe.

Email security@konomic.io with details. We accept reports for any Konomic-owned domain or service. We respond within 48 hours and resolve critical issues within 7 days. We don't currently offer paid bug bounties but credit responsible reporters.