Privacy Policy

This Privacy Policy explains what personal data PDFTools ("we", "us") collects when you use pdftools.am (the "Service"), how we use it, and the rights you have. We designed the Service to keep data collection to a minimum.

1. Who is responsible

PDFTools is the controller of the personal data processed through the Service. PDFTools operates from the Republic of Armenia. You can contact us about privacy through pdftools.am/contact.

2. The data we collect

• Account data — if you create an account: your email address and a securely hashed password.
• Files you process — the documents you choose to work with (see section 3).
• Payment data — if you buy a paid plan, payment is handled by third-party payment providers. We do not store full card details; we receive only limited confirmation data (such as plan, status and a transaction reference).
• Usage and technical data — basic logs needed to run and protect the Service, such as IP address, request time, the tool used, and approximate counts for rate-limiting and abuse prevention.
• Cookies and similar technologies — see section 5 and our Cookie Policy.

3. How your files are handled

Privacy of your documents is central to the Service:

• Browser-based tools process your files entirely on your device. Those files are never uploaded to us.
• Server-based tools upload your file only to perform the operation you requested. The file is processed in temporary storage, is not used for any other purpose, is not accessed by staff in the ordinary course, and is deleted promptly after the job finishes or fails. Jobs are subject to a short processing time limit.

We do not sell your files, and we do not use their contents to train any models.

4. Why we use your data and our legal bases

• To provide the Service and perform the operations you request — to perform our contract with you.
• To maintain security and prevent abuse (rate-limiting, fraud prevention, logging) — our legitimate interests.
• To process payments and manage plans — to perform our contract and to comply with accounting obligations.
• For analytics and advertising — based on your consent where required (see Cookie Policy).
• To comply with legal obligations and respond to lawful requests.

5. Cookies, analytics and advertising

The Service uses strictly necessary cookies (for example to keep you signed in and to remember your language). With your consent where required, we also use analytics (such as Google Analytics) and advertising providers (such as Google AdSense and Adsterra), which may set their own cookies and process data as independent controllers. Details and controls are in our Cookie Policy.

6. Sharing your data

We share personal data only with:

• Service providers that host and operate the Service on our behalf;
• Payment providers that process your payments;
• Analytics and advertising providers as described above;
• Authorities or third parties where required by law or to protect our rights.

We do not sell your personal data.

7. International transfers

Some providers may process data outside Armenia or your country. Where this happens, we rely on appropriate safeguards (such as standard contractual clauses) where required by applicable law.

8. Retention

We keep account data while your account is active and as needed to comply with legal obligations. Files processed on the server are deleted promptly after processing. Technical logs are kept only for as long as needed for security and operations and then deleted or anonymized.

9. Your rights

Subject to applicable law, you may request to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent at any time. You may also lodge a complaint with your local data-protection authority. To exercise your rights, contact us via pdftools.am/contact.

10. Security

We use technical and organizational measures to protect personal data, including encryption in transit, hashed passwords, access controls and prompt deletion of processed files. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children

The Service is not directed to children under the age of 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date below reflects the latest version. Material changes will be communicated where reasonable.

13. Contact

For any privacy question or request, reach us through pdftools.am/contact.