How to choose online tools more safely
Note: This guide is general information, not legal or professional advice. Check the requirements of the institution, platform or service where you plan to use a file.
Before you upload a contract to a site you have never used, take a minute to check it. Personal files can contain tax identifiers, addresses, amounts and signatures. After an upload, you have less control over where the file is processed and how long it remains there.
First question: where is the file processed?
Some tools send a file to a server for processing and return the result. Others process it in your browser without uploading the file. A tool should explain which model it uses and what happens to temporary files.
Browser-based processing can reduce the amount of information sent to a service, but it is not a complete security guarantee: the device, browser, page code and network still matter. If a tool does not clearly explain its processing model, avoid uploading sensitive material until you can verify it.
A practical pre-upload checklist
- Read the privacy notice and look for how long files or results are retained.
- Check whether the page says that processing happens in your browser or on a server.
- Confirm that the address uses HTTPS. HTTPS protects the connection in transit; it does not explain what happens to a file after it reaches the service.
- Be cautious about requests that are unrelated to the task. A basic conversion should not need access to your contacts.
- Look for an identifiable site operator, a contact method and terms of use.
- Remove sensitive details that are not needed for the task, when you can do so safely.
- If a tool offers a way to delete a server-side result, use it when you are finished.
Warning signs to take seriously
Be wary of an advertisement styled like a download button, an .exe file when you asked for a PDF, a browser extension promoted as necessary to speed up a simple conversion, or a demand to create an account before showing a result. Those requests are not inherent requirements of converting a file.
Match the tool to the document
- Public material and files without personal information may be suitable for ordinary online processing, depending on the service.
- For identity documents, contracts and statements, prefer a tool that clearly documents local processing or use an approved service with terms that meet your needs.
- Do not send passwords, confidential work files, medical records or another person’s data to an unfamiliar service. Documents about clients or employees may also involve privacy-law and contractual duties; follow your organization’s approved process.
Processing at ConverteArq varies by tool
The processing method is not the same across the whole site. The privacy notice says that most tools run in the browser, including the PDF merge and image-to-PDF tools. The PDF compressor is different: it uploads the PDF to the server for compression and returns a result. Its server code removes temporary files during normal completion and handled errors, but that should not be read as a guarantee about every possible failure or as a promise that all tools work locally. Check the notice on the specific tool before sending a sensitive file.
Português (Brasil): read the privacy notice and PDF compressor page · PDF compressor
Brazil-specific document guidance
Our guide to protecting personal documents before uploading them is available in Brazilian Portuguese. Português (Brasil): protect personal documents before sending them online.
Frequently asked questions
Does the padlock in a browser mean a site is trustworthy?
No. It indicates that the connection is encrypted. It does not tell you what the site does with a file after receiving it.
Is a free tool automatically less secure?
No. Price alone does not establish how a service handles data. Check the processing model, privacy notice and operator.
How can I tell whether processing happens in my browser?
Look for a clear statement on the specific tool page. Continuing to work after disconnecting is not conclusive proof: a page may have cached resources, while local processing can still depend on code loaded from the network.
Are browser extensions safer than websites?
Not automatically. An extension may request access to tabs or page data. Install one only when its publisher, permissions and purpose are clear and you need it.
Can I upload a client’s or employee’s document to any online tool?
Do not assume that you can. Privacy laws, contracts and workplace rules may apply. Use the service and process approved by your organization; this guide does not determine legal compliance.
Does HTTPS protect a file after upload?
HTTPS protects data while it travels between the browser and the site. Retention, access and deletion depend on the service and its stated practices.