Data Removal

Last updated: 25 August 2026

Your documents

There is nothing to delete. Redact PDF never receives your files: the PDF is opened, edited, verified and saved inside your own browser. We have no upload endpoint, so no copy of your document, no page image and no extracted text has ever existed on our servers.

If you have never subscribed

We hold no data about you at all — no account, no email address, no identifying cookie. Clearing site data for redact.bnj.app removes the only things that exist: your language and theme preference, and any form layouts you saved locally.

If you have a subscription

One row exists on our server: your licence code (BNJ-XXXXXXXX), the matching Stripe customer id, and the plan/status/period of the subscription. No email address is stored.

To have it deleted, email [email protected] with:

• the subject line "Data removal"
• your licence code

We delete the row within 30 days and confirm by reply. Deleting the row ends your access immediately. If a subscription is still running at Stripe, cancel it first (or ask us to cancel it in the same message) — otherwise it will keep renewing while the licence no longer works.

Data held by Stripe

Payment records (card token, billing email, invoices) belong to Stripe and are kept by them under their own policy and under tax law, which requires invoice records to be retained for several years. Ask us and we will pass a deletion request to them for anything not legally required.

Analytics

Our self-hosted Umami analytics stores no personal identifier, so there is no row that could be tied to you and nothing to remove individually.

Contact

Hugo Software — [email protected]