Privacy Policy

Our policy outlines the data we gather, its purpose, and how it is managed. You have certain rights pertaining to your data. We guarantee that your data is used solely for operating the PDF API and will never be shared for any commercial purposes. This policy is applicable to all of aPDF.io’s websites and services.

Our guiding principle

Our guiding principle to data privacy is to collect only information we need. Our PDF API service does only require the absolute minimum of personal data, and the subsequent paragraphs elaborate on how this principle is implemented in practice.

Your data protection rights

• Access and Correction: You have the right to request a copy of the information that we process regarding you and to ask us to correct any inaccuracies.
• Deletion and Limitation: You may request us to delete or limit the processing of your data under certain circumstances. However, we cannot delete any data that we are legally obligated to process.
• Object to processing: You have the right to request limitations on how and why your personal information is processed or used.
• Data portability: You possess the right to obtain the personal information that we have about you and to transfer it to another party if desired.
• Complaint: You are entitled to lodge a complaint with the relevant supervisory authority about how we handle your personal information. However, we would appreciate it if you contacted us first so that we can attempt to address the issue and provide you with a satisfactory resolution.

If you have any inquiries about how we manage your data or wish to exercise any of your rights, please contact us. We are obligated to respond to your request within 30 days.

What we collect and why

Identity & access

When you create an aPDF.io account, we require some identifying details such as your email address. This information enables you to customize your account and receive essential product updates. We may also send you optional surveys to help us improve our products and better understand how you use them. If you grant us permission, we’ll send you our newsletter and other updates.

Product interactions

The content you upload or receive, as well as the information you maintain in your aPDF.io product accounts, are stored on our servers. This enables you to use our products as intended, such as generating PDFs. We retain generated PDFs only until the specified expiration time is reached. In the event that you decide to delete your account, we will also delete the content associated with it.

Geolocation data

To ensure the security of our service and prevent fraudulent activities, we keep a record of all account access, including the full IP address and location of the device used to sign in. This information is stored for as long as your account remains active. Additionally, we also log the full IP address used to sign up for a product account as a precautionary measure against spammy signups.

Cookies

Persistent first-party cookies and some third-party cookies are utilized to store necessary application states and preferences, simplify your usage of our applications, and support A/B testing and analytics.

A cookie is a text snippet stored by your browser which may aid in remembering login information and site preferences. You may alter the cookie retention settings and choose to accept or block individual cookies within your browser settings. However, please be aware that our applications will not work and certain aspects of our service may not function properly if you disable cookies.

Voluntary correspondence

If you reach out to aPDF.io via email with a question or request for assistance, we will retain that communication, along with your email address, in our records. This enables us to refer to past correspondence if you contact us again in the future.

In addition, any information you provide voluntarily, such as written survey responses, will be stored by us. If you agree to participate in a customer interview, we may ask for your explicit consent to record the conversation for future reference or use. We will not do so without your express permission.

When we access or share your information

To fulfill your requested products or services.

We utilize certain third-party subprocessors to operate our applications and provide you with the services you requested. The following third-party subprocessors are used for our products:

• Amazon Web Services: Cloud services provider
• Cloudflare: Cloud services provider
• Hetzner: Hosting provider
• Mailgun: Transactional email service

If you integrate a third-party service into your use of our products, we may share your information as you direct. For instance, you may choose to connect your Gmail account to your aPDF.io account to enable Gmail for signing in to your aPDF.io account.

We never access your content except for a few limited purposes and only with your explicit permission. For example, we may need to manually intervene to correct an error that prevents an automated process from working. These are rare occurrences, and when they occur, we attempt to identify and address the root cause to prevent them from happening again.

To assist you in resolving or fixing a software issue.

We will always request your permission before accessing your content to assist you with a support case.

When required under applicable law.

We generally do not comply with requests from government authorities for user data, unless we are required to do so by law or in exceptional circumstances, such as an emergency situation.

How we secure your data

To ensure the security of your personal data, we encrypt all information transmitted from our servers to your browser using SSL/TLS. Additionally, sensitive data stored in our database is encrypted, and we take comprehensive measures to safeguard your data when it is at rest.

We take information security as seriously as we do privacy, and we are committed to protecting your personal data to the best of our abilities. To achieve this, we use various security measures such as strong passwords, data encryption, and two-factor authentication to prevent unauthorized access, alteration, deletion, or any other tampering with your personal data or any other data we store.

We only allow access or processing of your personal data by others in compliance with our instructions and only when absolutely necessary, such as in the event that we require IT support.

Changes & questions

We reserve the right to modify this policy as required to adhere to applicable regulations and to reflect any new procedures. If any significant changes are made to our policies, we will take any appropriate steps to notify users.

If you have any questions, comments, or concerns about this privacy policy, your data, or your rights concerning your information, please feel free to contact us at [email protected]. We will be happy to try to answer them.