Privacy Policy

Our Privacy Guarantees

Accounts, Hosted Workflows, Billing, and the ChatGPT App

Optional hosted services require limited service data. We use it only to authenticate users, deliver requested jobs, secure the service, reconcile billing, provide support, and meet legal obligations.

• Account and service records

  Supabase stores account identifiers, email, entitlement, API-key hashes, credit ledger entries, job metadata, and support/audit records. Raw API keys are shown once and are not stored.

• Office and Word to PDF

  These two routes upload the selected Office document over HTTPS to an isolated LibreOffice conversion job. The input and output are deleted when the request completes; they are not added to Max job history.

• Hosted job files

  Files deliberately submitted to Max or API workflows are stored privately so the job can run and the result can be downloaded. They may remain with account job history until the account or job data is deleted; signed download links expire separately.

• Payment records

  Razorpay processes India checkout and Polar processes international checkout. ExactPDF stores provider IDs, product, amount, currency, status, and entitlement records for reconciliation, refunds, fraud prevention, accounting, and legal obligations.

• Read-only ChatGPT app

  The public ExactPDF ChatGPT app receives only the workflow choices and short text arguments needed to answer your request. It does not receive PDF files, access ExactPDF accounts, create jobs, process payments, request API keys, or write request-level ExactPDF usage logs.

Local Browser Tool Boundaries

• No account required for main browser tools

  You do not need to provide a name, email, or account details to use the main local tools

• No document data in analytics

  File names, file contents, extracted text, and document metadata are not sent to GA4 or Ahrefs

• No payment card storage

  Razorpay or Polar processes checkout details; ExactPDF receives transaction and entitlement records, not full card numbers

• No automatic file uploads

  Selecting a file in a browser-local tool does not send it to ExactPDF. Office/Word to PDF, Max, and API show their server-processing boundary before the user starts the upload

• No File Data Collected

  Your file contents, file names, extracted text, and document metadata are not sent in analytics or stored by default

How Local Processing Works

• Files stay on your device

  When you select a PDF, it's loaded into your browser's memory only

• Processing happens locally

  All operations (compress, merge, convert) run in your browser

• Results download directly

  Processed files are saved directly to your device

• Memory is cleared after use

  Once you close the tab, file data is removed from browser memory unless you explicitly save the output yourself

Analytics Transparency

We use Google Analytics (GA4) and Ahrefs Web Analytics for limited product telemetry so we can understand which pages and tools are used and where people get stuck. Ahrefs receives page URL, page title, referrer, language, and coarse screen information. Analytics is separate from local file processing.

• Tool usage and coarse performance

  Events include tool views, uploads, process starts/completions, downloads, and coarse timing buckets

• Page context

  Ahrefs Web Analytics receives the current page URL and title, referrer, browser language, and coarse screen dimensions

• No file contents or names

  We do not send file names, document text, extracted text, or document metadata to analytics

• No ads or personalization signals

  GA is configured with IP anonymization and without Google signals or ad personalization signals

Feedback and Public Comments

Some tool pages include a feedback form. That form is optional and distinct from document processing.

• Only the text you type is submitted

  Your files are not attached and your document contents should not be pasted into feedback.

• Public comments are moderated

  Submissions are reviewed before anything appears publicly on a tool page.

• Do not include sensitive data

  Please avoid personal data, document text, client information, or regulated content in feedback forms.

Data Retention and Access

• Account and hosted-service records

  We retain them while the account is active and as needed for security, support, billing reconciliation, disputes, and legal obligations. You can request deletion; legally required transaction records may be retained.

• Deletion and access requests

  Email privacy@exactpdf.com to request access, correction, or deletion. We acknowledge requests promptly and normally complete verified requests within 30 days, subject to legal retention requirements.

• No document content in telemetry

  File contents, extracted text, and document names must not be written to analytics or error trackers. Hosted job storage is separate and access-controlled.