When you say "we process your data, we don't store it" does the PDF get sent to a third-party OCR service that might retain it temporarily or use it for training? I'm building something similar using Intel TDX enclaves where processing happens in hardware encrypted memory that literally can't be accessed. Curious if users actually care about that level of privacy or if "deleted in 24hrs" is enough.