Paprwork Privacy Charter

1. On-Device Execution Guarantee

Paprwork 2.0.0 executes document operations 100% inside your local device's memory. When you open, merge, split, redact, crop, or sign a PDF document, the file bytes are read directly from your storage drive into your computer's RAM. At no point during any operation are your documents, file paths, or file contents uploaded to remote cloud infrastructure, external APIs, or third-party AI training pipelines.

2. Zero Telemetry & Anti-Tracking

Paprwork contains zero telemetry modules, zero usage analytics SDKs, zero advertising identifiers, and zero hidden network listeners:

• We do not log the names, sizes, or metadata of files you open.
• We do not record which tools you run or your frequency of use.
• We do not require user accounts, emails, phone numbers, or subscriptions.
• The software functions with 100% identical capability when your physical network connection is disconnected.

3. Ephemeral RAM Sandboxing & Memory Zeroing

Local document privacy requires rigorous memory hygiene. In Paprwork 2.0.0:

• PDF data structures exist exclusively in volatile heap memory.
• When a document tab is closed or the application is terminated, allocated byte buffers are explicitly overwritten with zeroes before dereferencing.
• No unencrypted temp files or hidden shadow caches are written to your operating system temporary directories.
• Entered passwords for protected documents exist strictly in ephemeral CPU registers and are never cached to disk.

4. Stream-Level Permanent Redaction

Unlike cosmetic redaction tools that merely render opaque rectangles over document text, Paprwork’s redaction engine strips underlying byte streams, text glyphs, and font operators irreversibly. Underlying XRef tables are recalculated to ensure deleted information cannot be recovered by inspecting raw document streams.

5. Independent Cryptographic & Network Verifiability

Privacy claims should be verifiable, not accepted on blind faith. Any security professional or technical user can independently verify Paprwork's privacy posture:

• Network Monitoring: Run tools like Wireshark, GlassWire, or Fiddler while using Paprwork. You will observe zero outbound HTTP/HTTPS packets carrying document data.
• Release Checksums: Verify downloaded binaries against our published cryptographic SHA-256 hashes using PowerShell (Get-FileHash), Linux (sha256sum), or our client-side Web Crypto verifier on the Downloads portal.

6. Contact & Questions

For any inquiries regarding Paprwork privacy, local security architecture, or independent verification: labs@nirzura.in.