Legal · Privacy policy

Your files never leave your browser.

Sonchoy is built privacy-first. The PDFs, invoices, and statements you process stay on your device. Here’s exactly what we collect, what we don’t, and why.

Last updated · 26 May 2026

1. The short version

Sonchoy runs in your browser. The PDFs, spreadsheets, and documents you process never leave your device — we don’t upload them, store them, or even see them. We collect a small amount of anonymous analytics so we can improve the tools. That’s it.

2. Files you process

Every tool on Sonchoy — invoice generators, PDF converters, OCR, statement extractors, signers — runs entirely on your device using your browser’s JavaScript runtime. Your files are never uploaded to our servers because we don’t have a server-side processing pipeline. The output is generated in-browser and downloaded directly to your device.

3. Information we collect

We use Google Analytics 4 to understand how the Service is used in aggregate. GA4 collects:

  • Page views and route navigation
  • Approximate location (country / region, derived from IP)
  • Device and browser type
  • Anonymous session identifiers

We have configured GA4 with ads_data_redaction enabled and ad-personalization signals denied by default, so no ad-targeting data is sent to Google. We do not collect names, email addresses, payment details, or the contents of files you process.

4. Cookies & local storage

Sonchoy uses a small number of cookies and browser local-storage keys set by Google Analytics for anonymous measurement. Some tools also save your form inputs locally (e.g. an invoice draft) so they survive a page refresh — those entries live only in your browser and are never transmitted anywhere. You can clear all cookies and local storage at any time via your browser settings.

5. Third-party services

The Service connects to two third parties:

  • Google Fonts — fonts are loaded from fonts.googleapis.com and fonts.gstatic.com.
  • Google Analytics 4 — anonymous usage metrics via googletagmanager.com.

Pages that link to pdfFiller (an external paid service) are outbound links only; we don’t share your data with pdfFiller, and clicking through is entirely up to you.

6. Your rights

Because we don’t hold a user database, there’s nothing for us to delete on request — we never had your data in the first place. For the anonymous analytics we do collect, you can:
  • Install a privacy extension or use your browser’s built-in tracker blocker.
  • Use the Google Analytics opt-out add-on.
  • Clear cookies / local storage via your browser settings.

7. Children

Sonchoy isn’t directed at children under 13 (or 16 in the EU / UK). We don’t knowingly collect personal information from minors. If you believe we have, contact us and we’ll address it.

8. Security

The site is served over HTTPS. Because your files never leave your browser, there is no server-side storage for an attacker to breach. We can’t guarantee absolute security of any web service, but the privacy-by-architecture design dramatically reduces the surface area.

9. International users

The Service is available globally. By using it, you understand that anonymous analytics may be processed by Google in jurisdictions outside your country, including the United States. We don’t transmit any personally identifying data ourselves.

10. Changes to this policy

We may update this policy as the Service evolves. The current version always lives at this URL with the “last updated” date at the top. Material changes will be flagged at the top of the page.

Related

Terms of service

The rules of the road for using the tools — kept short and in plain English.

Read the Terms of Service →