Privacy policy

Draft, pending legal review. This describes how the product works today. The operator's legal name, address and the applicable law are still to be filled in, and the text has not yet been reviewed by a lawyer.

The short version

Your files never leave your device. Visual PDF Studio reads, shows, edits and exports your PDFs and images in your browser. We never receive the files, pictures of their pages, their text or their names. We keep an account, if you create one, and what we need to run your plan.

Your documents

• Files you import are stored only in your browser's storage (IndexedDB) on your device.
• No file, page image, preview, extracted text or file name is sent to us or to anyone else.
• Before an export, the app tells our server how many pages and documents it has and the output format, so it can apply your plan's limits. Nothing else about the documents is sent.
• You can remove files from the app at any time; clearing the site's data removes them all.

Your account

If you create an account, we keep:

• your email address, and whether you have confirmed it;
• a password hash if you chose a password (we never keep the password itself), or, if you sign in with Google or Facebook, the account ID that provider gives us; we do not receive your contacts, posts or anything else from them;
• your sign-in sessions, in a cookie that only keeps you signed in; sessions end after 30 days without use;
• your plan, and for Pro, the Stripe customer and subscription references;
• how many exports you have made, to count them against your plan; kept for 13 months, and the limit checks themselves for 90 days.

You can delete your account from the app at any time. Deleting it deletes all of the above, except what we must keep for tax and accounting about payments.

Payments

Payments are processed by Stripe. Your card details go to Stripe directly and are never seen or stored by us. Stripe processes payment data under its own privacy policy.

Product statistics

To know whether the product works, the app counts a few events, such as "an import succeeded", "an export finished" or "a visit today", and sends us the counts. We store only, per day, how many times each event happened. The counts carry no account, no device or browser identifier, no cookie, no file name and no document content, so they cannot be linked to you. To tell a new day's visit from a repeated one, the app keeps the date of your last visit in your browser and nowhere else. Daily counts are kept for 400 days.

If your browser sends Do Not Track or Global Privacy Control, the app counts nothing at all.

Logs and security

Our server records, for each request, which kind of request it was, the result, how long it took and, when you are signed in, your account ID. It records no document content, no file names, no email addresses and no request bodies. Your IP address is used briefly to limit abuse (rate limiting) and is not stored by us. Our hosting provider, Cloudflare, may process connection data to operate and protect its network.

Cookies

We use one cookie, only to keep you signed in, and a short-lived one while you sign in with Google or Facebook. We use no advertising or tracking cookies. This website itself sets no cookies.

Who processes data for us

• Cloudflare: hosting of this site, the app and our server, and our database.
• Stripe: payments, for Pro.
• Resend: sending account emails, such as confirmation and password reset links.
• Google and Facebook: only if you choose to sign in with them.

Your rights

You can see your account details in the app, change your password and delete your account. For anything else, including a copy of your data or a correction, write to …. Depending on where you live, you may also have the right to complain to a data protection authority.

Changes

If this policy changes in a way that matters, we will say so in the app before the change takes effect.