Your documents and online projects
Opening, editing, converting and exporting documents runs in your browser. Opening a file alone does not upload it. Google, Kingdom SSO and Firebase Auth establish identity; they do not upload document content.
Online project saving is optional. Your first manual Save project asks for confirmation and uploads original PDFs, placed images or signatures, and editable state to private Linux storage. It enables incremental autosave and an encrypted mirror in the shared Studio Firebase bucket. Only your verified Main account in the active workspace can request project data and object decryption keys. Keys are not published in Firebase or permanent download links.
Linux is the authoritative copy. If Firebase cannot be reached or its encrypted copy fails authentication or checksum verification, the editor uses the verified Linux copy and shows that fallback. A Linux save and a completed Firebase mirror are reported separately.
Project files retain original PDFs, including removed pages and cropped-out content. They are not securely redacted files. Share your final exported PDF rather than an editable project when original content must not be disclosed. Device backup and Import backup remain available without uploading the backup.
Deleting a project removes it from your private library immediately and schedules stored-copy cleanup. Cleanup can remain pending during a Firebase outage. Previously issued encrypted-object links expire quickly; documents already downloaded to your device cannot be recalled.