# What to Check Before Translating Private Documents Online

Review upload scope, retention, deletion, external AI providers, and permissions before using an online document translator for sensitive material.

A document translator needs access to the material it processes. Before uploading a private document, identify what the file contains, whether you are allowed to send it to that service, and what happens to it after the task. A reassuring word such as “secure” does not answer those questions.

You do not need to investigate every routine public brochure as though it were a confidential contract. You do need a clear boundary for files containing personal records, unpublished research, customer data, or business information that belongs to someone else.

## Check the entire file you are about to send

A PDF's first page may look harmless while its appendices contain names, addresses, signatures, or internal comments. Review the whole document, including covers, notes, illustrations, and any attached or embedded material relevant to your workflow.

Think about the instructions you enter too. A prompt that explains a client's project, a patient's circumstances, or an unpublished invention adds information beyond the document itself. Keep instructions specific enough to guide translation without including unrelated sensitive details.

Before uploading, answer:

* Who owns or controls the information, and who can authorize this processing?
* Is this the correct file, or a draft containing material you did not intend to share?
* Can you use a public, approved, or properly reduced version instead?
* Does your workplace or research agreement require a particular service or review?

If you remove sensitive material, verify the result rather than assuming a visible black rectangle has removed underlying text. Use an appropriate redaction workflow and inspect the file you will actually upload. This article is a practical checklist, not a determination of your legal or contractual obligations.

## Read storage and deletion statements separately

Uploading, processing, retaining, and deleting are different events. A service may need temporary content to finish a task, keep a result available afterward, and retain separate account or payment records. Ask which category a stated deletion period applies to.

Look for answers about the original file, extracted text, translated output, logs, backups, and support attachments. Also check whether deleting a task is different from deleting an account, and how to make a request when the interface does not answer your question.

For PDF Craft, the footer links to the current [OOMOL privacy policy](https://oomol.com/privacy). It discusses uploaded user content, service providers, retention, and deletion requests. It does not provide a universal fixed expiry for every PDF Craft task, so do not infer one from another provider's policy or an old comparison article. Seek clarification when the exact retention period matters to your approval.

Download your own copy of the result and store it under your normal document controls. A convenient task history should not be your only archive, particularly when your organization has its own retention requirements.

## Ask about external providers and content use

A web page, a desktop app, and a locally stored library tell you little by themselves about where translation runs. The interface can be on your computer while processing calls an external AI service. Conversely, a genuinely local pipeline needs all relevant stages, not just the viewer, to fit that description.

The linked OOMOL policy states that private user content is not used to train its AI models and describes sharing with service providers, including AI services when related features are used. That is not a statement that every task stays on your device or that every external provider has identical terms. For a sensitive project, ask which processing arrangements apply to that task.

Useful questions include whether human support access can occur, which providers are involved, what content they receive, and whether your required contractual terms are available. Do not treat a logo, encrypted connection, or general compliance statement as a substitute for those answers.

## Keep account and file permissions practical

Use the intended account, especially on a shared machine. Check where the browser saves downloads and who can access that folder. A carefully chosen processing service does not prevent a translated document from landing in a shared Downloads directory.

If you contact support, send the least information needed to explain the issue. A task identifier and a description may be enough initially. Do not automatically attach an entire private document or screenshots containing unrelated records.

| Stage                | A concrete check                                                        |
| -------------------- | ----------------------------------------------------------------------- |
| Before upload        | Correct file, authorized service, unnecessary sensitive content removed |
| During setup         | Instructions do not disclose unrelated details                          |
| After download       | Result is saved in an approved location with appropriate access         |
| When asking for help | Only the necessary task details or approved sample are shared           |
| At completion        | Required deletion or retention actions are understood and recorded      |

## Know when to use an approved local workflow

If a document must not leave a controlled environment, choose a workflow that your organization has actually verified for that boundary. Confirm where OCR, translation, temporary files, updates, and logging operate. “Desktop” and “local library” are not proof of offline processing.

Do not assume PDF Craft offers a private on-premises translation service because a competitor does. Its online upload workflow sends a document for processing. If that does not meet the document's requirements, pause the upload and use an approved alternative rather than trying to solve a policy mismatch with a different prompt.

For routine material that is approved for online use, continue with the [PDF workspace](https://pdfcraft.ai/en/pdf-craft/). For choosing a route by format and output, see the [PDF translator comparison](https://pdfcraft.ai/en/blog/pdf-translator-comparison/). The right sequence is permission first, appropriate processing second, and a saved, checked result afterward.