Privacy Policy
At SecurePDF AI, your privacy is not an afterthought — it is the foundation of our service. This policy explains what data we collect, how we handle your files, and the rights you have over your information.
Last updated: June 2, 2026
1. Data We Collect¶
SecurePDF AI is designed to minimize data collection. We do not require you to create an account, and we do not collect personal information beyond what is strictly necessary to process your files.
- File content: The PDF files you upload are processed server-side solely to perform the operation you request (e.g., compression, merging, conversion). File content is never read, indexed, or analyzed for any purpose other than the requested operation.
- IP address: Your IP address is logged as part of standard server request handling and is used for abuse prevention, rate limiting, and service reliability. We do not use it to build behavioral profiles or link requests across sessions.
- Anonymous session identifier: A randomly generated session UUID is assigned to your browser session to associate your upload with your download. This identifier is not linked to any personal account or persistent identity.
- Basic request metadata: We may log minimal technical information such as request timestamps, file sizes, and the type of operation performed. This data is used exclusively for service reliability and abuse prevention.
2. How Files Are Processed¶
All file processing occurs server-side using isolated, ephemeral processing environments. Your files are:
- Transmitted over encrypted connections (TLS/HTTPS).
- Stored temporarily in a secure, sandboxed environment only for the duration of processing.
- Never accessed by SecurePDF AI staff or any automated system beyond the processing pipeline.
3. Data Retention¶
We follow a strict auto-deletion policy. Uploaded files are encrypted at rest with AES-256-GCM, and every file — input and output — is automatically deletedat the end of your tier’s download window: within 1 hour on Free and within 24 hours on Pro and Teams. There is no way to recover files after deletion. We do not maintain backups of user-uploaded content.
4. Third-Party Sharing¶
We do not sell, rent, or lease your files or personal data. Your files are never transmitted to external services for processing, analytics, or any other purpose.
The only third party that receives any data in connection with the Service is our payment processor for paid tiers:
- Polar.sh— when you subscribe to a paid plan (Pro, Teams, or Student), your payment details are handled directly by Polar.sh, our billing provider. SecurePDF AI does not store your card details. Polar’s own privacy policy governs how they handle billing data.
Beyond Polar.sh for billing, no other personal data is shared with external parties.
5. Cookies and Tracking¶
SecurePDF AI does not use tracking cookies, advertising pixels, or fingerprinting technologies. If we use analytics at all, we use privacy-respecting, cookieless solutions that do not track individual users or build behavioral profiles.
6. GDPR Rights (European Economic Area)¶
Data controller: The operator of SecurePDF AI is the data controller for personal data processed through this Service. For controller identity and contact details, email [email protected].
Legal basis for processing: We process your files and associated request metadata on the legal basis of contract performance(Article 6(1)(b) GDPR) — processing is necessary to provide the PDF operation you have requested. We process IP addresses and session identifiers on the basis of our legitimate interests (Article 6(1)(f) GDPR) in preventing abuse and ensuring service reliability.
If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation:
- Right of Access: You may request a copy of any personal data we hold about you.
- Right to Rectification: You may request correction of inaccurate personal data.
- Right to Erasure: You may request deletion of your personal data. Given our auto-deletion policy, this is effectively fulfilled automatically.
- Right to Data Portability: You may request your data in a structured, machine-readable format.
- Right to Object: You may object to the processing of your personal data.
Because we do not require accounts and auto-delete all files, the practical scope of these rights is limited. To exercise any of these rights, contact us at the address below.
7. CCPA Rights (California Residents)¶
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:
- Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you.
- Right to Delete:You may request deletion of any personal information we have collected. As stated above, all files are auto-deleted at the end of your tier’s download window (within 1 hour on Free, 24 hours on Pro / Teams).
- Right to Opt-Out of Sale: We do not sell your personal information. There is nothing to opt out of.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
To submit a CCPA request, email us at [email protected]with the subject line "CCPA Request."
8. Children's Privacy¶
SecurePDF AI is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
9. Changes to This Policy¶
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
10. Contact Us¶
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at: