Privacy policy

Last updated 6 October 2026

MoA is built so that most of what you do never leaves your device. This policy explains what we handle when you use the site, what we keep, who else is involved, and the choices you have.

Files you open in the tools

PDF, image and document tools (such as compress, merge, split, convert, OCR and fill and sign) run inside your browser. Your files are not uploaded to our servers.

The OCR tool downloads language data from jsDelivr, a public content network, the first time you use a language. Like any web request, that service sees your IP address. It does not receive your files.

AI features

When you use an AI feature (the presentation maker, document writer, chat with a document, summarise, translate, the agent, or a request typed into the home box), the text you type and the relevant text from your document are sent through our server to OpenRouter, which passes them to the AI model chosen to answer. Images in your documents are not sent.

We do not store your prompts or the answers on our servers. For each request we log the model used, the number of tokens and the cost, without its content, so we can manage costs.

OpenRouter and the model providers process this text under their own terms and privacy policies. We do not use your content to train AI models.

Accounts and Sign in with Google

Signing in is optional. If you sign in with Google, we ask Google only for your basic profile (scopes: openid, email, profile). We receive and store your Google account ID, email address, name and profile picture link. We never see your Google password, and we do not keep Google access tokens after sign-in.

When you are signed in, the documents and presentations you save to your account are stored with their title and dates, so you can open them on other devices.

MoA's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use this information only to sign you in and show your account, and we do not sell it, use it for advertising, or share it except as described in this policy.

Cookies and storage on your device

If you sign in, we set a session cookie that keeps you signed in for up to 30 days, and a short-lived cookie during the sign-in step to protect it. Both are strictly necessary.

The site uses your browser's local storage to keep drafts, settings such as light or dark mode, and similar preferences on your device. You can clear these at any time in your browser settings.

We do not use advertising or analytics cookies.

Hosting, security and logs

The site is hosted on Cloudflare, which handles every request and may process IP addresses and request details to deliver the site and protect it from attacks. Saved account data is stored in Cloudflare's database service.

We use your IP address briefly, in memory, to limit how many requests can be made in a short time. It is not stored for this purpose.

How we use information

We use the information above only to provide the features you ask for, keep your account and files available to you, keep the service secure, prevent abuse, and manage our costs. We do not sell personal data and we do not show ads.

Who else processes data

Cloudflare (hosting, database and security), OpenRouter and the AI model providers it routes to (AI features), Google (sign-in), and jsDelivr (OCR language data). These providers may process data in the United States and other countries.

How long we keep data

Account details and saved files stay until you delete them or delete your account. Sessions end when you sign out or after 30 days without use.

When you delete a file or your account, it is removed from our database straight away. Copies may remain in our hosting provider's database backups for up to 30 days before they are overwritten.

Your choices and rights

You can use every tool without an account. When signed in, you can rename or delete any saved file from Recent files, and delete your account and all its files from the account menu.

Depending on where you live (for example the UK, the European Union or India), you may have rights to access, correct, delete or move your personal data, and to object to or restrict how it is used. Contact us to use these rights. You can also complain to your local data protection authority.

You can remove the site's access to your Google account at any time from your Google Account settings, under third-party connections.

Children

MoA is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

If we change how we handle data, we will update this page and the date at the top. For significant changes affecting account holders, we will also show a notice on the site.

Contact

Contact us through the details on the MoA website with any question about this document or your data. We aim to reply within 30 days.