Privacy Policy

Effective October 2, 2026

ITECH MATRIX SOLUTIONS operates PDFData and is responsible for the personal data we handle through this service. Contact hello@pdfdata.net for privacy questions or deletion requests.

General PDF tools

Merge, split, compression, images, annotations, password tools, Office text conversions, OCR and other general tools run locally in your browser. Their document content is not uploaded to PDFData. OCR may download recognition software and language resources from third-party asset hosts; the scan itself is processed on your device. AI Summarizer and Translate PDF send extracted document text to PDFData and OpenAI for the requested task. These new AI tools do not save your document or result on the PDFData server.

Accounts and email

We use Zoho Mail to send sign-in codes and Pro conversion CSVs to your verified email. Account email, subscription identifiers, billing status and usage counters are stored privately on our server. Sign-in codes expire after 10 minutes; hashed session tokens expire after 30 days. A secure HTTP-only session cookie keeps you signed in. Document sessions are temporary and expire after two hours or a server restart. Email attachments may be retained in your and our mailboxes under Zoho settings. Contact support to request account deletion; payment records may need to be retained separately.

What we process

Statements may contain names, account identifiers, transaction descriptions, dates, balances and other financial information. We process the uploaded file, extracted text and conversion results to produce your CSV. We also process limited usage information to enforce preview limits, operational logs for reliability and security, and emails you send to support.

AI processing and providers

Text extraction runs in your browser. Extracted statement text is sent to our server and OpenAI for AI checks. For scanned documents, the PDF itself may be sent for AI processing. Hosting is provided through Vultr, with ServerPilot used for server management. Payment details are handled by the provider displayed at checkout; our existing checkout uses PayPal. FastSpring checkout is not yet connected. We do not receive your full payment card details.

Why we use this data

We process document content to deliver the conversion you request. We use limited technical information to prevent abuse and maintain the service. We retain statements for format improvement only if you choose the separate, unchecked opt-in before uploading. You can use the converter without this consent.

Storage and retention

For new uploads from this policy's effective date, we do not save the PDF, extracted text or AI results for format improvement unless you opt in. Data is still processed temporarily to perform the conversion. If you opt in, retained documents and extracted records expire after 30 days and are removed by a scheduled cleanup. Retained data may be reviewed by authorised operators to diagnose unsupported formats. We do not fine-tune our own model automatically from each upload.

OpenAI and payment providers have their own processing and retention policies. Our AI requests disable API response storage; this does not eliminate any provider-side retention for security or abuse monitoring. Server logs, payment records and support correspondence may be retained separately where needed to operate the service, resolve disputes or meet applicable obligations.

Passwords and browser data

Your PDF password is used by the browser to unlock the document and is not included in our learning or AI request payloads. We use a hashed identifier derived from your IP address to count daily previews. Shared networks may share an allowance. Third-party checkout tools may use cookies or similar technologies when you open checkout.

Sharing and international processing

We share document content with service providers only for the processing described here, not for sale to advertisers. Providers may process information outside your country, including outside the UK or European Economic Area. Contact us for information about the arrangements applicable to your data.

Your choices and rights

You may request access, correction or deletion of personal data we retain, withdraw improvement consent, or raise a privacy concern by emailing support. Include the filename and approximate upload time for a retained statement; do not include your PDF password. We may need to verify your request. Rights depend on applicable law, and you may contact your local data protection authority.

Security

The website uses HTTPS. No service can guarantee absolute security. Upload only documents you are authorised to process, and avoid sharing bank login credentials or other information that is unnecessary for conversion.

Policy updates

We will publish changes here with an updated effective date. Material changes to account, email delivery or checkout features will be reflected here.

Temporary conversion sessions

Conversion content is held temporarily in server memory for up to two hours so the final AI review can use the same statement after payment. It is cleared when the session expires or the service restarts. These temporary sessions are separate from the optional 30-day storage for format improvement.