Why upload-based converters raise GDPR questions
Under GDPR, sending a PDF containing personal data to a converter's server — even one that promises immediate deletion — is a data processing activity that typically requires a data processing agreement, and gets more complicated if that server sits outside the EU/EEA.
Because PrivaPDF processes files entirely inside the browser tab that opened them, personal data never transfers to PrivaPDF's infrastructure or anywhere else, which removes the cross-border transfer and processor-agreement questions rather than trying to answer them.