Privacy Policy

PDFHQ.io provides online tools to manipulate and sign PDF and other documents. You can reach us at pdfhq.io@gmail.com.

• Account & profile data: name, email address, password (hashed), organization, plan, and preferences.
• Authentication data: OAuth identifiers and tokens (e.g., Google/Facebook) required to sign you in; we do not receive your third‑party passwords.
• Files you upload: documents you submit to use our tools (e.g., merge, split, rotate, compress, e‑sign). Files are processed to provide the Service and are automatically deleted after a limited time unless you explicitly save or share them.
• Usage & device data: IP address, device/browser details, language, timestamps, pages viewed, and actions taken to improve reliability, security, and performance.
• Payment data: billing email, subscription identifiers, and transaction metadata processed by our payment processor; we don’t store full card numbers.
• Support communications: messages and attachments you send us.

• Provide, maintain, and improve the Services and features you request.
• Authenticate users, prevent fraud/abuse, and ensure security.
• Process your documents and generate outputs as requested.
• Handle subscriptions, payments, invoices, and account management.
• Provide support and respond to inquiries.
• Analyze aggregated usage to improve performance and user experience.
• Send essential service and transactional emails. You can opt out of non‑essential emails.

We process personal data under these bases, depending on context:

• Contract: to deliver the Services you request.
• Legitimate interests: to secure, improve, and measure our Services.
• Consent: for optional features like certain cookies/marketing.
• Legal obligation: to meet tax, accounting, or law‑enforcement requirements.

We use necessary cookies to operate the site and may use analytics cookies to understand how the Services are used. You can manage preferences in your browser settings and, where available, within our cookie banner.

• Temporary processing: Uploaded files are processed to provide the requested tool and are automatically deleted after processing or after a short retention window (typically within 24–72 hours), unless you explicitly save or share them. For e‑signing, documents may be retained longer to comply with audit or legal requirements you initiate.
• Model usage: When you use AI features, relevant snippets or derived text may be sent to AI providers solely to fulfill your request. We contractually restrict providers from using your content to train their models.
• Confidentiality: Do not upload sensitive documents unless necessary. You control what you upload and share.

• Service providers: cloud hosting, storage, analytics, email, customer support, and payment processing, bound by confidentiality and data‑processing terms.
• Legal & safety: to comply with law, enforce terms, or protect rights, property, and safety.
• Business transfers: in a merger, acquisition, or asset sale, consistent with this Policy.
• With your direction: sharing you initiate (e.g., sending a signature request).

We retain personal data only as long as necessary for the purposes described above, including providing the Services, complying with legal obligations, resolving disputes, and enforcing agreements. Uploaded files are deleted automatically after processing or within a short window, unless you choose to retain or share them, or retention is required for e‑signing records you initiate.

We use technical and organizational measures designed to protect your information (e.g., encrypted transport, access controls, secure development practices). No method of transmission or storage is 100% secure; we continually work to improve safeguards.

Depending on your location, you may have rights to access, correct, delete, or port your data, and to object to or restrict certain processing. You can exercise many controls in your account settings or by contacting us at pdfhq.io@gmail.com. You also have the right to lodge a complaint with your local supervisory authority.

If we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms, as required by applicable law.

Our Services are not directed to children under 13 (or older, as defined by local law) and we do not knowingly collect personal information from them.

We may update this Policy from time to time. If we make material changes, we will provide notice (for example, via the website or email). Your continued use of the Services after changes become effective means you accept the updated Policy.

Questions or requests? Email pdfhq.io@gmail.com.