Privacy Policy

Last updated: May 13, 2026

1. Information We Collect

  • Account information: email address, password hash, optional display name, and Google profile data if you sign in with Google OAuth
  • Billing information: LemonSqueezy customer ID, subscription ID, variant ID, and renewal date. We do not store card numbers or other sensitive payment data
  • Uploaded files: held temporarily in server memory/disk for the conversion job and auto-deleted within 24 hours
  • Usage logs: IP address, User-Agent, endpoint hit, processing time, status code, and timestamp
  • Anonymous identifiers: hashed IP or browser-side UUID token used to apply usage limits to non-members
  • Cookies and ad identifiers: Google AdSense cookies for ad delivery, frequency capping, and measurement (see section 5)

2. How We Use Information

  • Provide core features: PDF conversion, merge, split, redaction, OCR
  • Support signup, login, API key issuance, and usage-limit enforcement
  • Process payments and sync subscription state
  • Improve service quality, diagnose errors, monitor security
  • Prevent abuse and apply rate limits
  • Comply with applicable laws and resolve disputes

3. Data Retention

  • Account data: deleted upon account closure (except records required by law, kept for the legally mandated period)
  • Uploaded files and conversion outputs: auto-deleted within 24 hours of processing
  • Usage logs: retained up to 12 months, then anonymized or deleted
  • Payment records: retained 5 years per applicable e-commerce regulations
  • Anonymous usage counters: aggregated to daily/monthly statistics

4. Third-Party Processors

  • LemonSqueezy (US): subscription billing and invoicing
  • Google AdSense (US): ad delivery, frequency capping, measurement
  • Google OAuth (US): social sign-in using email and profile when selected by the user
  • Vercel / AWS (US): hosting and data storage
  • We do not share user data with parties other than those listed above, except where legally required.

5. Advertising and Cookies

  • This site shows ads via Google AdSense. AdSense may use cookies and ad identifiers to serve ads.
  • Google may serve interest-based ads based on your visits to this and other sites.
  • You can opt out of interest-based ads at https://www.google.com/settings/ads.
  • See Google's ad policies for more on the cookies and data used to serve ads.

6. Your Rights

  • You may request access, correction, deletion, or restriction of processing of your personal data.
  • From your dashboard (/dashboard) you can directly revoke API keys and review account details.
  • For other requests, contact us via the link below.

7. Security

  • Passwords are stored as Argon2 hashes; we never store plaintext passwords.
  • API keys are stored as SHA-256 hashes; the full key is shown only at issuance.
  • All traffic is encrypted in transit over HTTPS.
  • Uploaded files are retained only as long as required for conversion and auto-deleted on schedule.

8. Changes to This Policy

  • This policy may be updated to reflect legal or service changes. Material changes will be notified in advance.
  • Last updated: 2026-05-13

9. Contact

  • For privacy questions, please use the /contact page.
Related: Terms of Service · About · Contact