Security at Pagivo PDF
How we protect your files and your account.
Your files never stay with us
- When you run a tool, your file is processed in memory on the server and the result is returned straight back to your browser.
- Your files are not stored on our server - everything is removed as soon as the analysis finishes.
- We never read, index, share, or use the contents of your files for anything else.
Downloads stay private
- Download responses are served with
Cache-Control: no-storeso your browser does not keep copies. - Download links only ever work for the session that created the result - they cannot be shared.
- Search engines are told not to index download responses (
X-Robots-Tag: noindex, nofollow, noarchive).
Account security
- Passwords are hashed using scrypt - we cannot recover your password.
- Google sign-in uses OAuth 2.0 / OIDC - we never receive your Google password.
- CSRF protection is applied to all state-changing requests.
- Payment data is handled exclusively by Stripe - we never see card numbers.
Reporting a vulnerability
If you discover a security issue, please disclose it responsibly by contacting us directly. Please do not publish details publicly until we have had a chance to investigate and remediate.