Security Practices
We believe in privacy-by-design. Learn how StuTool is architected to minimize data collection and process your documents safely.
Local PDF Processing
All PDF and document files processed by the StuTool web application (including Merge, Compress, OCR, and PDF-to-Word tools) remain entirely on your device. We utilize Web Workers and client-side JavaScript to process your files directly within your browser. Documents are not uploaded to StuTool servers, meaning there is no risk of your sensitive documents being intercepted, leaked, or stored by us.
Data Minimization & Local Storage
We follow strict data minimization principles. We do not use user accounts, passwords, or authentication databases. For tools like the Resume Builder, your draft data is saved locally in your browser using standard localStorage, so your resume remains available if you refresh the page. This data remains on your machine.
AI Enhancement & Server Boundaries
When you use the AI Objective Enhancement feature in the Resume Builder, the text you submit is transmitted through StuTool's backend API. Our server acts exclusively as a secure proxy to communicate with configured third-party AI providers (such as Google Gemini, Groq, or OpenRouter). This architecture ensures that our API credentials are never exposed to the client. The transmitted text is processed in memory to fetch the AI response and is not saved to any database by StuTool.
Third-Party Service Boundaries
While StuTool minimizes external dependencies, we do rely on secure third-party services for specific features:
- Web3Forms: Used to securely handle messages submitted through our footer Feedback Form.
- AI Providers: Process text strictly for the Resume Builder enhancement feature.
Security Limitations
Please be aware that StuTool is provided as a free toolkit. While we architect our application for local processing and safety, we do not employ enterprise-level security audits, penetration testing, or certified compliance frameworks (like SOC2 or HIPAA). You should use discretion when processing highly sensitive, classified, or legally restricted information on any web platform.
Responsible Disclosure
If you discover a security vulnerability or have concerns about data handling within the StuTool web application, please report it to us directly so we can investigate and resolve it promptly.