The short version
PDF to Markdown and Image to Text read the file in your browser. The file is not uploaded.
The text you paste is sent to the configured model to produce the response. It is not stored in our database.
If you create one, we store your email, a password hash, your plan, and a session.
Aggregate page views use a one-way hash, not a raw IP address.
Tool-by-tool
| Tool | File | Text | What leaves your device |
|---|---|---|---|
| PDF to Markdown | Stays local | Not sent | Only a daily usage count |
| Image to Text | Stays local | Not sent | Only a daily usage count |
| PDF Summarizer | Stays local | Extracted text is sent | Extracted text for the summary |
| PDF to Word | Stays local | Extracted text is sent to build the .docx | Extracted text for the document |
| Email, Tone, Checklist, Meeting, Transcript, Resume | No file | Pasted text is sent | The text needed for the response |
| Grammar, Paraphrase, Cover Letter, Summary, Expander, To-Do | No file | Pasted text is sent | The text needed for the response |
| Image Alt Text | Local by default | Context is sent | Context; the image only in cloud vision mode |
| Other local PDF, image, text and web tools | Stays local | Stays local | Only a daily usage count |
Which model receives text
AIbyNow uses an OpenAI-compatible model provider configured by the site operator. The current production configuration uses Qwen through DashScope's OpenAI-compatible endpoint. The provider processes the text to return the result under its own terms. Do not paste secrets, credentials, regulated health information, or anything you would not send to a third-party processor.
What we store
- Daily usage: a one-way hash of your IP (guests) or your account ID, the UTC date, the tool name, and a count. Rows older than 14 days are deleted.
- Accounts: email, salted PBKDF2 password hash, plan, creation date, and a hash of the session token. Passwords are never stored in plain text.
- Waitlist: the email you submit, until you ask for removal.
- Aggregate page views: path, timestamp, and a one-way hash of IP + user agent; no raw IP, no query strings, 120-day retention.
- Server logs: short-lived access logs kept by the hosting provider for security.
What we do not do
We do not sell your tool inputs, use them to train a model, or show third-party ads. We do not store your drafts or converted documents. If advertising is added later, the privacy policy will be updated before it goes live.
Deleting your data
Email hello@aibynow.com to delete your account or a waitlist address. You can also use the tools as a guest; an account is optional for the guest allowance.
Read the full privacy policy, the terms of use, or how we test the tools.