Account data
Account data comes from GitHub or Google: email, name, and avatar. We store session cookies and a device token for each CLI you approve.
Documents in the CLI
Agents and users run the CLI on the local machine. File contents are not uploaded. Billing only receives operation type, page counts, and job identifiers.
Documents in the online tools
The tools on the website (jetformat.com/tools and the pages for each tool) work differently: the files you choose are uploaded to our server and processed there by the same engine the CLI uses.
- Uploaded files are deleted as soon as the job finishes, whether it succeeds or fails. The result is deleted 1 hour after the upload, or earlier when you press Delete now.
- Files are used only to produce your result. They are not used to train models and not viewed by people.
- A password you enter to protect or unlock a PDF is kept in memory while your file is processed. It is not saved and not logged.
- After the files are deleted we keep a usage record: the tool, the file type, its size and page count, and the credits charged. The file name is removed with the files.
- To enforce the daily limit for visitors without an account we store a keyed hash of the IP address, not the address itself.
Billing records
We do not sell customer documents. Billing records include credit purchases and usage, not document text. Card payments are processed by Stripe.
CLI usage pings
The CLI sends one anonymous record per command: the command name, the output format, the input file type, how long it took, whether it succeeded, the CLI version, the operating system, and the agent host that called it. It never sends a path, a file name, file contents, or an account id. A random install id, generated on your machine, counts installations. jetformat telemetry off, JETFORMAT_TELEMETRY=off, or DO_NOT_TRACK=1 stops it. Full field list.
Analytics
The website and console use Google Analytics (measurement id G-SG2VWM3XN0) to count page views and a few button clicks, such as starting a checkout. Google sets its own cookies for this. We do not use advertising trackers, and Google Analytics never sees documents: the CLI does not load it, and the online tools send it only the tool name and the number of files and pages, never a file or a file name. Block it with any content blocker or Google's opt-out add-on.