Your manuscript stays yours

IndexPDF uses your manuscript only to build and review your index. Your manuscript is never used for AI training, advertising, or marketing.

Projects are owner-scoped application data. Manuscript files are not stored in public buckets, and downloads require authenticated application access. Signed, revocable sessions and secure, HTTP-only cookies protect accounts.

When you delete a project, its manuscript and manuscript-derived project content are immediately removed from IndexPDF’s active systems. We do not keep an archival copy. The project disappears from your account immediately, and deletion is verified across our live storage.

Deletion is different from the bounded recovery protections operated by our infrastructure providers. Our application database currently has a six-hour disaster-recovery window. Google Cloud Storage soft delete is configured for seven days, with object versioning disabled. Deletion tombstones are replayed before restored database traffic is enabled so a recovery cannot restore a deleted project to the application.

IndexPDF staff do not routinely inspect manuscripts, and we do not build staff manuscript-browsing tools. Exceptional access is limited to customer-requested support, security or abuse response, and legal obligations. Access uses least-privilege service identities, is audited, and follows a documented break-glass procedure.

IndexPDF sends only the content needed for document preparation and indexing to commercial API processors. Production Gemini processing uses a paid service. We request non-storage modes where supported and avoid unnecessary provider file uploads and durable prompt caches. We do not permit providers to use manuscript content to train their general models.

API processors may temporarily retain request content for security, abuse-prevention, or legal purposes under their commercial terms even after IndexPDF deletes its copy. Current controls and terms are described by Gemini, Anthropic, and OpenAI. Google’s storage recovery behavior is documented in its soft-delete documentation.

IndexPDF does not currently claim a security certification or fixed data residency. This policy and the product’s processor terms must receive qualified legal review before public production release.

The early-access request asks about your workflow, schedule, and index types. Do not include manuscript text, index entries, or other confidential publication content.