Your uploaded documents
Your files are stored privately while a task is being processed. File access is limited to the browser session that uploaded them, the account that owns the task, and recipients you invite through a private signature link. They are not published or made searchable.
Uploads and results are kept for 2 hours from upload. Access stops at expiry, and scheduled cleanup removes the files within the next five minutes. You can also delete a task’s files from its page. A running conversion may need to stop before deletion finishes.
Processing runs on this server in a restricted process with no network access. We do not send document contents to an external conversion or AI service. Download your results before they expire; this service is not long-term document storage.
Phone scans and signature requests
A phone-scanning connection lasts 20 minutes. Anyone with its private link can send pages to that connection. Scan images are removed when transferred to a PDF task, when the connection is revoked, or by cleanup after expiry. The new PDF task follows the normal file retention period.
A signature link lets its recipient review page images and submit a visible signature. Share each link only with its intended recipient. You can revoke links or cancel the request. Signature requests keep the original document expiry; they do not extend file storage. Names, optional email addresses, consent and signing event records are retained for up to 30 days after the document expires, then removed by scheduled cleanup. These are electronic signing records, without a certificate-based digital signature or independent identity verification.
Saved workflows and webpage imports
Workflows save your chosen steps, settings and any uploaded logo in your account until you remove the workflow or delete the account. Source documents and document passwords are not saved in workflows. For webpage imports, this server fetches the public address you provide and then converts a restricted reading copy locally. The remote website receives a request from our server.
Account and activity information
We store the name, email address and optional phone number you provide, along with account activity, task status and download records. Passwords are stored as hashes. Temporary document passwords are encrypted while waiting for processing and cleared afterwards.
We use a daily code derived from your IP address to apply the guest free allowance. Accounts also have a daily allowance record. Server logs may contain IP addresses, timestamps and requested URLs for troubleshooting and abuse prevention. Basic task records remain after the documents are deleted.
Payments and sign-in services
M-Pesa purchases use Safaricom Daraja. Your payment phone number, amount and transaction references are used to confirm the purchase. We never ask for or receive your M-Pesa PIN. Enter it only in the prompt on your phone.
If Google sign-in is available and you choose it, we receive the Google account identifier, name and email details needed to sign you in. Password reset messages use the email address associated with your account.
Cookies and browser settings
Essential cookies keep you signed in, protect forms and connect guest tasks to your browser. Your chosen light or dark theme is saved in browser storage. Clearing session cookies can remove access to guest tasks.
Help with your information
Update account details from the Account page. To ask about your information or request account deletion, contact info@agilecode.co.ke. Payment and service records may need to be retained for accounting or resolving a payment query.