Privacy Policy & Zero-Storage Commitment

1. Client-Side Processing Architecture

Traditional online utility websites upload your private contracts, medical bills, financial statements, and ID photos to third-party cloud servers for processing. UtiliBox was built with an inverse architecture: we bring the software directly to your browser.

• PDF Suite: PDF merging, splitting, compression, and page reorganization execute via local WebAssembly (pdf-lib and PDF.js).
• Image to Text (OCR): Tesseract.js runs inside an isolated browser Web Worker. Image pixels are decoded in local canvas memory and never transmitted over the internet.
• Hindi Font Converter: Remington and Unicode character-mapping algorithms run instantaneously in-browser via JavaScript.
• QR Code Generator: QR matrix generation and SVG rendering happen entirely on your client machine.

2. Electronic Signature (eSign) Data Handling

When utilizing the UtiliBox eSign workflow, documents are loaded temporarily into the browser session to facilitate signature placement, signer identity verification, and tamper-evident SHA-256 digest creation.

Documents are processed temporarily for the sole purpose of signing execution and Certificate of Completion generation. Documents are not retained after signing is concluded, subject only to necessary technical security logs.

3. Authentication & User Account Data

If you create an account to access Pro features or manage subscription tiers, we store basic authentication credentials (your email address and cryptographic user ID) via our secure Supabase authentication provider.

We record non-identifiable usage counters (e.g. number of OCR conversions run per day) to enforce fair usage limits. We never log or store document filenames, document contents, extracted text, or image metadata.

4. Payment Processing

All subscription billing is handled through PCI-DSS compliant third-party payment gateways (Razorpay for Indian domestic transactions including UPI and RuPay, and Stripe for international payment methods). UtiliBox does not store, transmit, or have access to your full credit card numbers or UPI PINs.

5. Cookies & Local Storage

We utilize browser localStorage strictly for application preferences:

• Caching your Pro subscription authentication status for offline speed.
• Tracking your daily free tool allowance (e.g. 5 OCR images per day) on your device.
• Language preference selection for the eSign module.

We do not deploy third-party advertising tracking cookies or sell your browsing history to advertising brokers.