Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Account credentials (securely hashed)
• Payment information (processed through Stripe)

1.2 API Usage Data

When you use our API services, we collect:

• API keys and authentication tokens
• Request timestamps and frequency
• API endpoint usage statistics
• Error logs and performance metrics
• IP addresses for security purposes

1.3 PDF Documents

We temporarily process PDF files you submit through our API. Files are:

• Processed in memory and deleted immediately after processing
• Stored temporarily (maximum 24 hours) only if output is returned as a URL
• Never used for any purpose other than providing the requested service
• Not accessed, viewed, or analyzed by our staff

2. How We Use Your Information

We use the collected information to:

• Provide and maintain our API services
• Process your PDF documents according to your API requests
• Manage your account and billing
• Monitor and analyze API usage and performance
• Detect, prevent, and address technical issues and security threats
• Send you service-related notifications and updates
• Comply with legal obligations

3. Data Storage and Security

3.1 Security Measures

We implement industry-standard security measures including:

• SSL/TLS encryption for all data in transit
• Encryption at rest for sensitive data
• Regular security audits and updates
• Access controls and authentication
• Secure API key management

3.2 Data Retention

• PDF Files: Deleted immediately after processing (or within 24 hours if URL output is used)
• Account Data: Retained while your account is active and for up to 90 days after deletion
• Usage Logs: Retained for up to 12 months for analytics and security purposes
• Billing Records: Retained as required by law (typically 7 years)

4. Information Sharing and Disclosure

4.1 Third-Party Services

We share information with trusted third-party service providers:

• Stripe: For payment processing
• Clerk: For authentication services
• Cloud Storage: For temporary file hosting (when applicable)
• Analytics: For service improvement and monitoring

4.2 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations or court orders
• Protect our rights, privacy, safety, or property
• Investigate potential fraud or security issues
• Enforce our Terms of Service

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

5. Your Rights and Choices

You have the following rights regarding your personal information:

5.1 Access and Portability

• Request a copy of your personal data
• Download your usage data and API logs

5.2 Correction and Deletion

• Update your account information at any time
• Request deletion of your account and associated data
• Revoke API keys to stop data collection

5.3 Marketing Communications

• Opt out of promotional emails (service emails will still be sent)
• Manage notification preferences in your account settings

6. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze website traffic and usage patterns
• Improve our services and user experience

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our services.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and that your data receives adequate protection.

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending you an email notification (for significant changes)

Your continued use of our services after any changes constitutes your acceptance of the new Privacy Policy.

10. GDPR Compliance (EU Users)

If you are located in the European Union, you have additional rights under GDPR:

• Right to be Informed: Transparency about data processing
• Right of Access: Request access to your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain types of processing
• Rights Related to Automated Decision Making: Not subject to automated decisions

To exercise these rights, please contact us at privacy@pdfapihub.com

11. CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information (we do not sell your data)
• Right to access your personal information
• Right to equal service and price

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: