Desktop app privacy policy
How the desktop app handles your files and data
What this policy covers
This policy explains how the PDF Password & Watermark Remover Windows desktop app (the app) handles your data, for both the installer from our site and the Microsoft Store build. The online tool on this site processes files in your browser and has its own rules — see the privacy notice.
Files are processed on your machine
PDFs you add are read and processed locally, and the results are written to the folder picked in Save settings. The file, its name, the page contents and the watermark results never go to a server. An open password is used in memory to decrypt the document; it is never written to the settings file or kept with the job. With Keep a backup copy on, the original stays in your output folder until you delete it.
Checking the perpetual membership online
The desktop app needs a valid perpetual membership before it will process files, so every start contacts the membership service at sweetpt.com: it signs in silently with the device identifier and checks the entitlement (so no window pops up each time), and the sign-in window only appears when you open the account centre, buy, or need to enter credentials. A request carries the app id and version the build was issued, the device identifier and device name (system name plus computer name), the operating system and version, the interface language and your account; it returns the entitlement, orders and announcements. Accounts, orders and entitlements are kept by the membership service to grant and check benefits, reconcile orders and handle support. The desktop app is paid software, so this check is unavoidable when it runs; if you would rather not buy, use the free web version instead.
Footer announcements and events
The scrolling announcement in the footer comes from the membership service and carries release news and membership offers. Showing or clicking one reports an impression or click event with the placement, ad type, app version, client system and language; each cold start also reports one launch event. These records only measure announcement reach: they never include your documents and are not used to track you across apps.
What is stored on your machine
Settings: %APPDATA%\PDFCleanWorkshop\settings.json, holding the save mode, output folder, processing options, worker count and interface language. Membership SDK data: %USERPROFILE%\.orderpay-core, holding the sign-in session with its access and refresh tokens, cached entitlement and announcement data, the queue of events still to be sent, and the device identifier (a random UUID, not a hardware fingerprint); its runtime logs go to a per-app folder under %LOCALAPPDATA%\sweetpt. Deleting those folders, or uninstalling the app, clears this local data — back up anything you want to keep first.
What we do not collect
We do not collect document contents, file names, page counts or watermark results; beyond the account details a membership sign-in needs, we do not collect what you type; we do not read unrelated files and do not collect keystrokes, screen contents or the clipboard; and we do not sell or share your data with third parties.
The Microsoft Store build
The Microsoft Store build is distributed and updated by Microsoft, which may collect diagnostic and usage data at install, launch and crash time under the Microsoft Privacy Statement; that part is outside the app's control. The app itself ships no third-party analytics, advertising or crash-reporting SDK — the footer announcement comes from our own membership service.
Third-party components
The app bundles PySide6/Qt and PDF processing libraries; they run locally and never go online on their own. The full list and licences are in THIRD_PARTY_NOTICES, shipped with the app.
How long data is kept
Local data stays until you change the settings, delete the folders above or uninstall the app. On the server: membership accounts and order records are kept while the membership is active and deleted within 30 days of account closure; sign-in sessions and device records are cleaned 12 months after the last activity; launch, impression and click events are kept for 12 months.
Your choices and rights
In the account centre you can review and edit your profile, manage signed-in devices and sign out. You can also email support@sweetpt.com to ask what membership data we hold, to correct it or to have it deleted. After you sign out and delete %USERPROFILE%\.orderpay-core, no membership data is left on your machine.
Security
Traffic to the membership service always uses HTTPS with signed, token-bearing requests, and the device identifier and session tokens are stored encrypted on your machine. Server data is reachable only by staff who need it, and it is cleaned up on the schedule above.
Changes to this policy
When features or data handling change, this page and its effective date are updated; anything newly collected is called out in the release notes. Continuing to use the app means you accept the updated policy.
Contact
Shenzhen Hongshu Technology Co., Ltd. · support@sweetpt.com. Data requests are answered within 15 business days.