File retention
How long each kind of data stays, what makes it go away, and what does not. These values are the ones the product enforces.
Policy version 2026-10-13.1
Retention periods
| Data | Kept for | Notes |
|---|---|---|
| Incomplete upload | 1 hour | An upload that never finishes is abandoned and its reserved space released. |
| Unsaved conversion result (inputs, outputs, previews) | 24 hours after the upload session starts | The same window for every visitor, signed in or not. Access ends at this time even if a download link was never used. |
| Failed or canceled job artifacts | 1 hour | Kept briefly so a failure can be diagnosed, then removed. |
| Saved document | Until you delete it | Saving makes a verified copy into your documents. No age-based rule applies. |
| Document in trash | 7 days | Restore it from the trash before the shown deadline, or delete it permanently sooner. |
| Job diagnostics | 30 days | Minimal technical records about a job: timings, outcome, error class. Not file contents; filenames only where needed. |
| Pseudonymous usage events | 30 days | Raw events about steps in the product. Only aggregated counts are kept longer. |
Nothing extends a temporary file
Downloading a result does not reset the clock, and neither does signing in. Only saving changes what happens to the file. The result page always shows the exact expiry time.
Expiry versus physical deletion
Access ends at the application deadline. Physical removal from storage happens afterwards and is asynchronous: our cleanup runs on a schedule, and a storage-level safety net removes temporary objects 2 days after they were created. A file can briefly outlive its expiry on disk without being accessible.
Downloaded copies
Anything you or someone with your link has already downloaded is a copy outside our systems. We cannot recall it. Short-lived download links remain usable until they expire, which is at most 60 seconds after they are issued.
Account inactivity
Not activeWe have drafted, but not enabled, a policy for inactive free accounts. Under the draft, a verified free account with no saved documents would become eligible for removal after 180 days without meaningful activity, and one with saved documents after 365 days, in each case followed by a 30-day warning period with emailed notices. Any sign-in or file action would cancel a pending removal.
This policy is not in effect. Nothing is deleted for inactivity today, and nothing will be until the policy is published here with a date and announced to affected accounts in advance.
Related: how we protect your files · deleting files · privacy