Yes, we'll delete files and links after 24 hours. That's not implemented yet, but will be happening by the end of the weekend.

We're also planning some pro features like account-level permissions, and we could serve the PDF file dynamically from our servers instead of storing it on S3.

I'd love to know if you have any precise security requirements, feel free to email me: alex@heeton.me