What stays on your device
Local projects stay on your device. Only when choosing Save online or Upload PDF do paying Pro subscribers send the file, name and folder organization to Deluma’s private library on Railway in the United States. Limits are 10 GB, 1,000 PDFs and 120 MiB per file. Each completed upload counts toward the plan allowance; downloading a saved file does not count again. Trials and free benefits do not enable storage. There is no public sharing or automatic project upload.
Optional account, when configured
Optional accounts are operated by Deluma's own API and its PostgreSQL database on Railway. When you create an account or sign in, Deluma processes your email address, authentication identifier, and protected session credentials. The database may store basic profile preferences, plan status, and access rights.
When you subscribe to Pro, the database also stores provider customer and subscription references, product, status, expiration, identifiers, cryptographic event digests, and limited technical security logs. It does not receive full card details, raw webhook payloads, or PDF content. The editor remains available on Free without a subscription. Local projects stay on your device. Only when choosing Save online or Upload PDF do paying Pro subscribers send the file, name and folder organization to Deluma’s private library on Railway in the United States. Limits are 10 GB, 1,000 PDFs and 120 MiB per file. Each completed upload counts toward the plan allowance; downloading a saved file does not count again. Trials and free benefits do not enable storage. There is no public sharing or automatic project upload.
Retention and deletion
Turning off renewal keeps access until the paid period ends. After that, new uploads and online changes are blocked, but download and deletion remain available for three calendar months. The automatic worker then deletes files and folders from the online library. Renewing a paid subscription before deletion stops scheduled removal. Notices appear in the library and by email. PDFs are encrypted before entering the private bucket; this is not end-to-end encryption. Deluma keeps encrypted operational backups of library PDFs, with six-day retention and daily cleanup. These copies are for technical recovery and do not provide user versions or a trash bin. Deletions must also be reapplied during recovery. Keep a local copy. We do not guarantee immediate forensic erasure of the provider’s physical infrastructure copies.
Account and support timelines
Unconfirmed registrations are deleted after 72 hours. Temporary ticket codes expire after 10 minutes and their technical records are removed after expiry. Expired verification and recovery tokens are kept for up to 7 days; ended sessions for up to 30 days; rate-limit controls for up to 2 days; completed email queues for up to 90 days; and security events for up to 180 days. Resolved or closed tickets and administrative audit records are kept for up to 24 months. Financial records may remain longer only for accounting, tax, fraud prevention, disputes, and legal duties.
Export
When you export, you choose the destination of the copy. From that point on, retention, backup, and sharing depend on the location or app you selected. Optional email delivery sends the PDF, filename, recipient and verified account email to the Deluma server and email provider, using help@stromlogic.com as sender. The attachment is processed in memory and is not saved to the library. For up to 30 days we keep only a technical delivery record, without content, filename or recipient address. The email provider and recipient mailbox apply their own retention and size rules.
Backup protection by platform
On Android, cloud backup and automatic device-to-device transfer are blocked for files and metadata. On iOS and macOS, durable project folders are marked to stay out of Apple backups and are not moved to purgeable cache. On Windows, backups configured by you or by the system may include the app's local data.
Browser storage
On the Web, the app requests persistent storage without blocking the editor. The browser may deny the request or remove data because of storage pressure or manual clearing. Export important copies.
Local processing and the Office exception
Except for Office conversion, the processing and analysis needed to edit, convert, and render PDFs take place locally. Office conversion temporarily sends only the file you choose, only after explicit consent, and removes the temporary server copy when finished. We do not use PDFs for training or advertising. A handwritten signature is created locally as a visual mark and is not a certified digital signature. Local projects stay on your device. Only when choosing Save online or Upload PDF do paying Pro subscribers send the file, name and folder organization to Deluma’s private library on Railway in the United States. Limits are 10 GB, 1,000 PDFs and 120 MiB per file. Each completed upload counts toward the plan allowance; downloading a saved file does not count again. Trials and free benefits do not enable storage. There is no public sharing or automatic project upload.
Public pages and support
The public privacy and support pages do not open project storage and do not receive your PDFs. They store your language preference and, only if you choose to donate, the data described below. The hosting provider may process technical data needed to deliver and protect the page, such as your network address and browser user agent.
Voluntary donations
When you donate, Deluma stores the amount, currency, status, and technical payment references, plus your name, comment, and email when provided or required by the provider. Stripe processes USD payments and Mercado Pago processes BRL through Pix. Deluma does not receive full card details or the content of your PDFs. Records are kept only for the minimum time needed for reconciliation, fraud prevention, accounting, and legal obligations. For questions or requests, use the secure support form.
Controller and your rights
Deluma.app is a product operated under the Stromlogic brand. To request access, correction, portability, objection, or deletion of personal data, open a privacy ticket through the secure support form. We may verify your identity before acting on the request to prevent unauthorized access to account data.