This policy explains what data we collect, why we collect it, and the choices you have. It applies to the PDFTools website, the consumer tools and the developer API.
1. Data we process
We aim to collect as little as possible. Which data is involved depends on how you use the service.
- Browser tools: your files are processed on your device and are never transmitted to us.
- Server tools: files you submit are uploaded over TLS, processed to produce your result, and deleted automatically within 24 hours.
- Account data: if you sign up, we store your email, name and billing identifiers.
- Usage data: job counts, credit usage, timestamps and error codes, used for billing and reliability.
2. Legal bases
Under the GDPR we rely on performance of a contract (to provide the service), legitimate interests (security, fraud prevention and service improvement) and consent (analytics and advertising cookies).
3. Retention
Uploaded files and results are deleted automatically within 24 hours. Job metadata is retained for 90 days for auditing and support, then deleted or aggregated. Account data is retained while your account is active.
4. Sub-processors
We use a small number of vetted providers to operate the service, including cloud hosting, object storage, payment processing and transactional email. A current list is available in our Data Processing Addendum.
5. International transfers
We offer EU data residency for server-side processing. Where data is transferred outside the EEA, we rely on Standard Contractual Clauses.
6. Your rights
You have the right to access, correct, export and delete your personal data, and to object to or restrict certain processing. Contact us to exercise any right, and we will respond within 30 days.
7. Contact
For privacy questions or to request a DPA, email mycgb@foxmail.com.
This document is provided in English. In case of a conflict between translations, the English version prevails.