Privacy Policy
What we collect
When you create an account we collect your name and email address. When you process a file, the resulting PDF is temporarily stored in Google Cloud Storage so you can download it — it is automatically deleted after 24 hours.
We do not collect, read, or retain the original files you upload. Files are processed in memory and discarded immediately after the output is generated.
We also collect standard usage data (pages visited, features used) via Firebase Analytics to understand how the product is being used.
How we use it
We use your information to:
- Operate your account and process your PDF tasks
- Send transactional emails (operation confirmations, credit receipts)
- Improve the product through aggregated, anonymised analytics
We do not sell your data. We do not use your data for advertising.
Third-party services
PDF Craft uses a small number of trusted third-party services:
| Service | Purpose |
|---|---|
| Firebase (Google) | Authentication, database, file storage |
| Stripe | Payment processing |
| Resend | Transactional email delivery |
| Sentry | Error monitoring |
| DatoCMS | Content management |
Each service operates under its own privacy policy and a data processing agreement with us.
Data retention
- Account data — retained while your account is active
- Processed files — deleted automatically after 24 hours
- Usage analytics — retained in aggregated form for up to 24 months
You can request deletion of your account and all associated data at any time by contacting us.
Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Receive your data in a portable format
To exercise any of these rights, email support@pdf-craft.app.
Cookies
PDF Craft uses a single session cookie (__session) to keep you signed in. We do not use tracking or advertising cookies.
Security
We use HTTPS for all data in transit and rely on Google Cloud's infrastructure for data at rest. Access to production systems is restricted to authorised personnel.
Changes to this policy
We may update this policy from time to time. If we make material changes we will notify you by email or by posting a notice on the site. The date at the top of this page reflects when the policy was last revised.
Contact
Questions about this policy? Email us at support@pdf-craft.app.