What iLovePDF says it does
The following comes from iLovePDF’s own data protection page, checked on October 2, 2026:
- Retention: files processed with standard tools are automatically deleted from its servers within two hours.
- Encryption in transit: file transfers use HTTPS with TLS.
- Certification: it maintains an ISO/IEC 27001-certified information security management system.
- Access: it states that it does not access, analyze or mine the content of user documents.
What Smallpdf says it does
Smallpdf’s safety page says files from its free tools are deleted after one hour, that files are protected with 256-bit TLS during transfer, that it is ISO/IEC 27001 certified, and that data is processed on EU servers. It also notes that files you keep in an account are stored until you delete them.
What those statements do not cover
- A copy still exists. For the processing and retention window, your file sits on a third party’s servers. Deletion policies reduce that window; they do not remove it.
- You rely on the provider’s controls. Certifications and policies describe how a company says it operates. You cannot inspect them yourself.
- Wording is specific. iLovePDF’s retention statement refers to standard tools. Features such as cloud storage, accounts or other products may follow different rules.
- Your own obligations. A contract, NDA or data-protection requirement may restrict sending a document to a third-party service at all. That is a question for the person responsible for that obligation, not something a policy page can answer.
- Policies change. Re-read the current page before relying on this one.
A quick way to decide
- Would it matter if a stranger saw this file? If not, a reputable cloud tool is fine.
- Does a contract, NDA or regulation restrict where it can go? If yes, avoid third-party upload unless that has been approved.
- Is it a simple operation (merge, split, compress, rotate, protect, unlock)? These can run locally, so there is little reason to upload.
- Does it need server-side capacity, OCR or collaboration? Then a cloud tool may be the right trade, with the risks above understood.
The local alternative, and how to check it
FreePDFKit’s supported core tools process the file inside your browser tab, so there is no upload to delete. Try Merge PDF, Split PDF, Compress PDF, Protect PDF or Unlock PDF with a test file, and confirm the claim yourself: open your browser’s developer tools, switch to the Network tab, run the tool, and look for any request that carries the file.
For the wider picture, see best private PDF tools, the no-upload alternatives compared and FreePDFKit vs iLovePDF. This guide is general information, not legal or compliance advice.
People also ask
Common questions
Is iLovePDF safe to use?
For everyday, low-sensitivity files, its published controls (HTTPS in transit, deletion within two hours for standard tools, ISO/IEC 27001 certification) are reasonable. For confidential documents, remember that a copy exists on a third party’s servers during processing and retention, and decide whether your situation allows that.
How long does iLovePDF keep my files?
Its data protection page says files processed with standard tools are automatically deleted from its servers within two hours. The wording refers to standard tools, so check the specific feature or plan you use.
Does iLovePDF read my documents?
It states that it does not access, analyze or mine the content of user documents. You cannot verify that from the outside, so it is a statement of policy to weigh, not something you can test.
Is Smallpdf safer than iLovePDF?
They publish similar controls. Smallpdf says free-tool files are deleted after one hour, uses TLS encryption, is ISO/IEC 27001 certified and processes data on EU servers. Neither can offer the guarantee of a tool that never receives the file.
Is a no-upload tool always safer?
It removes the upload and any third-party retention, which is the main exposure for a confidential PDF. It does not protect against malware on your own device, a shared computer, or what you do with the output file.
What should I use for a confidential PDF?
Prefer a tool that processes the file on your device or an app installed on your own computer. If you do use a cloud tool, check its current policy first, use a copy with sensitive parts removed, and delete the file afterwards where the service allows it.