Privacy Policy

1. Document & File Processing Architecture (Zero-Retention)

Unlike traditional cloud conversion websites that upload your files to remote servers, ArfaAI is engineered with a client-side-first architecture:

• In-Browser Processing: Utilities such as the Image Resizer, Image Compressor, PDF Page Rotator, Text Hash Generator, and Password Generator execute entirely inside your device’s browser memory via modern HTML5 APIs, JavaScript, and WebAssembly. Your files are not transmitted across the internet to our servers.
• No Server Retention: We do not store, view, copy, or index your private photographs, documents, spreadsheets, or text files. Once you close your browser tab, all memory buffers are instantly purged by your operating system.
• External AI Services: When you voluntarily use generative AI features (such as text-to-video or text-to-image), prompts are submitted directly to the designated third-party AI provider API (e.g., Pollinations.ai or Tencent Hunyuan) to generate the requested output. Do not submit sensitive personal identifiers or confidential credentials into generative AI prompt forms.

2. Google AdSense & Advertising Cookies Disclosure

ArfaAI displays advertisements provided by Google AdSense and its certified third-party vendor partners to fund our free web utilities. In compliance with Google AdSense Publisher Policies, please note the following:

• Third-Party Vendors: Google, as a third-party vendor, uses cookies and tracking technologies to serve advertisements on ArfaAI.
• DoubleClick DART Cookie: Google's use of advertising cookies (including the DoubleClick DART cookie) enables it and its advertising partners to serve personalized ads to users based on their visits to ArfaAI and other websites across the Internet.
• Opting Out of Personalized Advertising: Users may opt out of personalized advertising at any time by visiting Google My Ad Center.
• Network Advertising Opt-Out: Alternatively, you can opt out of a third-party vendor's use of cookies for personalized advertising by visiting the Digital Advertising Alliance (AboutAds) or the Network Advertising Initiative (NAI). European residents can visit Your Online Choices.

3. Standard Web Server Log Files

Like all standard web servers, our hosting infrastructure automatically collects standard non-personally identifiable log information when you browse our pages. This includes Internet Protocol (IP) addresses, browser type, Internet Service Provider (ISP), referring/exit pages, operating system platform, date/time stamps, and click counts. These logs are used solely for analyzing site traffic trends, securing the server against DDoS attacks, and administering the website. These records are never linked to any personally identifiable information.

4. GDPR Privacy Rights (EEA & UK Users)

If you reside within the European Economic Area (EEA) or the United Kingdom, you are entitled to full data subject rights under the General Data Protection Regulation (GDPR):

• The Right to Access: You have the right to request copies of your personal data.
• The Right to Rectification: You have the right to request correction of inaccurate information.
• The Right to Erasure: You have the right to request deletion of your personal data.
• The Right to Restrict & Object to Processing: You have the right to restrict or object to how we process your personal data.

Because ArfaAI does not require user accounts, user logins, or server-side database storage of file uploads, we generally do not hold or store any personal data. If you have an inquiry regarding GDPR rights, please contact us at contact@arfaai.com.

5. California Consumer Privacy Act (CCPA / CPRA)

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have specific statutory rights:

• Right to Know: You have the right to know what categories of personal information a business collects, discloses, or sells.
• Right to Delete: You have the right to request the deletion of your personal data.
• Right to Opt-Out of the Sale of Personal Data: ArfaAI does NOT sell your personal information or uploaded files to any third party. We do not engage in data brokering.
• Non-Discrimination: We will never discriminate against you for exercising your privacy rights.

6. Children's Privacy (COPPA Compliance)

Protecting children while using the internet is especially important to us. ArfaAI does not knowingly collect any Personal Identifiable Information from children under the age of 13. If a parent or guardian believes that ArfaAI has inadvertently received personal information from a child under 13, please contact us immediately, and we will promptly purge such records from our logs.

7. Contacting Our Data Privacy Team

If you have questions, feedback, or concerns regarding this Privacy Policy or our client-side processing practices, please reach out to our privacy team: