Access
Request a copy of every piece of data we hold about you, in a portable JSON format, within 30 days.
YOUR RIGHTS
Six things you can ask us to do.
Email privacy@pdfcraftai.com from the address on your account. We respond within 30 days, usually same-week.
Rectification
Correct inaccurate personal data — name, email, billing details — directly from /app/settings or via support.
Erasure
Delete your account and all stored documents. Backup retention drops the data within 30 days.
Portability
Export your file history, billing transactions, and usage logs as a single download.
Object & restrict
Object to processing for analytics or marketing. We honor opt-outs immediately and confirm in writing.
Lodge a complaint
You can file with your local supervisory authority. We'd appreciate a heads-up first so we can fix it.
DATA WE PROCESS
Categories, basis, and retention.
CATEGORYLEGAL BASISRETENTION
Account data (email, name, hashed password, OAuth ID)Contract (Art. 6(1)(b))Until account deletion + 30 days backup
Uploaded files & generated outputsContract (Art. 6(1)(b))Auto-deleted within 60 minutes
Billing records & invoicesLegal obligation (Art. 6(1)(c))10 years (tax law)
Product analytics (anonymized GA4, Clarity)Legitimate interest (Art. 6(1)(f))14 months
Server logs (IP address, request path)Legitimate interest (security)30 days
SUB-PROCESSORS
Who we share data with, and why.
Each vendor has signed standard contractual clauses (SCCs) where required. We notify customers of material changes 30 days in advance.
HostingerApplication hosting (Node.js, MySQL)EU (Lithuania)
CloudflareCDN, DDoS protection, edge cacheGlobal (EU PoPs preferred)
Google (OAuth + GA4)Sign-in & anonymized analyticsEU/US (SCCs)
Microsoft ClarityAggregated session metricsEU/US (SCCs)
Data Protection Officer
Reach our DPO at dpo@pdfcraftai.com. For data subject access requests, please confirm your identity by emailing from the address tied to your account.
For US-equivalent disclosures, see our Privacy Policy and Data Processing Addendum.
Need a signed DPA?
Standard 2021 SCCs included. We turn them around within 2 business days.
Request DPA