Privacy Policy

Overview

Zion Solutions ("Zion Solutions", "we", "us", or "our") provides a set of free, browser-based tools: merging PDFs, converting Word to PDF, converting PDF to Word, removing image backgrounds, and planning personal or business budgets, debt payoff, and investment growth (together, the "Services"). This Privacy Policy explains what information is collected when you use the Services, how it is used, and the rights you have under European Union / United Kingdom data protection law (the GDPR and UK GDPR) and applicable United States state privacy laws (including the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and comparable laws in other states).

Information we collect

When you merge PDFs, convert a document, remove an image background, or enter figures into a budget, debt, or investment planner, that file or data is read and processed entirely on your own device, inside your browser. It is not transmitted to Zion Solutions's servers or to any third party as part of that processing, and we do not retain a copy of it anywhere. When you close or reload the page, that data is gone unless you have downloaded a result to your own device.

The Services do not require you to create an account, log in, or submit a form to use any tool, so we do not collect names, email addresses, or other identifying information through the Services themselves. If you contact us directly (for example, by email), we will collect whatever information you choose to include in that message, such as your email address and the contents of your message, solely to respond to you.

Like most websites, our hosting provider automatically logs certain technical information whenever you visit any page of the Services, including your IP address, browser type and version, device and operating system information, the page you requested, the page that referred you (if any), and the date and time of the request. This information is generated by the standard operation of web servers and is used only for operating, securing, and troubleshooting the Services (for example, detecting abuse or diagnosing outages). We do not currently use cookies, browser local storage, or third-party analytics or advertising trackers on the Services. If that changes in the future, we will update this Policy and, where required by law, request your consent first.

To provide the tools, pages on this site load JavaScript libraries and, for the background-remover tool, an AI model, directly from third-party content delivery networks, including Cloudflare (cdnjs.cloudflare.com), jsDelivr (cdn.jsdelivr.net), and esm.sh. When your browser fetches these files, the provider of that CDN will typically see technical information such as your IP address and browser type, in the same way any website resource request works, governed by that provider's own privacy policy. Your files, images, and figures are not sent to these CDNs — only the software libraries and, where applicable, the AI model used to run the background-removal tool locally in your browser are downloaded from them.

How we use information, and our legal basis

We use the limited technical information described above only to operate, maintain, and secure the Services; to diagnose and fix technical problems; to prevent fraud, abuse, and security incidents; and to comply with our legal obligations. We do not use it to build advertising profiles, and we do not sell or share it with third parties for their own marketing purposes.

For individuals in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR / UK GDPR: our legitimate interests in operating a secure and reliable website (Article 6(1)(f)); compliance with a legal obligation, where applicable (Article 6(1)(c)); and, for any future use of cookies or similar technology that requires it, your consent (Article 6(1)(a)), which you may withdraw at any time.

Data retention and security

Because the files and figures you process with the Services never leave your device, there is nothing for us to retain — that data exists only in your browser's memory for the duration of your session. Standard server and hosting logs are retained only for as long as reasonably necessary for security and operational purposes, and are then deleted or anonymized on a rolling basis.

We take reasonable technical and organizational measures to protect the limited information we do handle, including serving the Services over an encrypted (HTTPS) connection. No method of transmission or storage is completely secure, but the client-side design of these tools substantially limits our exposure to your data in the first place, since it is never sent to us.

Your privacy rights

You have the right to request access to, correction of, or erasure of your personal data; to restrict or object to our processing of it; to receive a copy of it in a portable format; to withdraw consent at any time where processing is based on consent; and to lodge a complaint with your local data protection supervisory authority. Because we hold very little personal data about visitors to the Services (mainly short-lived technical logs), these requests will generally already be satisfied by the practices described in this Policy, but you are welcome to contact us using the details below with any request or question.

Depending on your state of residence, you may have the right to know what personal information we collect about you and why; to request access to or a copy of that information; to request deletion or correction of it; to opt out of the "sale" or "sharing" of personal information and of targeted advertising; and to not be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not use personal information for cross-context behavioral advertising. To exercise any of these rights, contact us using the details below; we will respond within the time required by applicable law and may need to verify your request.

The Services are not directed to children, and we do not knowingly collect personal information from children under 13 (or the relevant minimum age in your jurisdiction). If you believe a child has provided us with personal information, please contact us so we can address it.

Our hosting provider and the third-party content delivery networks referenced above may process technical log data in countries outside your own, including the United States. Where required, we rely on appropriate safeguards recognized under applicable data protection law, such as standard contractual clauses, for any such transfer.

Third-party links and open-source libraries

The Services use open-source, third-party JavaScript libraries to perform conversions and calculations locally in your browser (including pdf-lib, mammoth.js, html2pdf.js, pdf.js, and the @imgly background-removal library), each governed by its own license and, where applicable, its own publisher's privacy practices for the CDN hosting it. If the Services ever link to an external website, that site's own privacy policy applies to your use of it, and we are not responsible for its content or practices.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in the Services or in applicable law. We will revise the "Last updated" date above whenever we do, and, if a change is material — for example, if we begin using cookies, analytics, or start collecting new categories of personal data — we will provide a more prominent notice or, where required by law, seek your consent before the change takes effect.