1. Who is responsible for your information
Robust Digital Kft., Levente u.14/a, 2161, Csomad, Hungary, operates PDFily and is responsible for the personal information it uses to provide the website, account and billing services described here. Contact support@pdfily.org for privacy questions or requests.
This notice applies to your use of the PDFily website, accounts and document tools.
2. Information used by PDFily
Account and contact information: the email address you enter at checkout or sign-in, an account name if provided, authentication records and the contents of support requests.
Document information: files you select or upload, filenames, file sizes, the selected tool and settings, conversion status and the processed result. A file can contain personal information about you or others. Some tools require a document password, which is sent as a conversion parameter when needed.
Payment and subscription information: Stripe customer, checkout and subscription references, payment status, invoice links, amounts, currency and billing dates. Stripe collects the payment method details and any billing information needed for payment or tax calculation.
Technical information: requests to our hosting and service providers can include an IP address, browser/device details, timestamps and error or security information. These providers may retain operational logs under their own arrangements with us.
3. Why we use information
We use account, document and transaction information to perform the service you request: process files, provide downloads, manage access, deliver account and payment messages, and answer support requests.
We also use information to maintain reliability and security, prevent misuse and fraud, investigate errors, manage disputes and meet applicable legal or accounting obligations. Depending on the activity, the legal basis may be performance of a contract, compliance with a legal obligation or legitimate interests in operating and protecting the service.
Where a particular activity requires consent, we will request it for that activity. Using the website does not mean that you give blanket consent to every possible use of your information.
4. How document processing works
The browser can display a local source preview. When you continue with a task, the selected files are uploaded for processing. File contents and the necessary settings are sent to ConvertAPI to perform the requested conversion, OCR, repair, redaction or password operation.
Processed files are held in private storage so that authorised users can download them. Downloads use access checks and may use short-lived signed links. Private storage does not mean that no service provider processes the file.
The integration requests ConvertAPI’s non-persistent result mode. Its own security and processing information explains the provider’s handling. PDFily separately stores processed results for download as described below.
Do not submit a document unless you have authority to process and share its contents with the providers involved. For files containing sensitive or confidential information, consider whether this service is appropriate before uploading.
5. Storage and retention
In the current configuration, newly prepared unpaid results normally expire after 30 minutes. Starting checkout extends the result’s availability to approximately 24 hours. A paid or subscription-authorised result is generally available for up to 30 days. Keep your own copy of the source and download results you need.
Source upload objects used for a completed processing request are submitted for removal after the request finishes, including when processing fails. Interrupted uploads, failed removal operations, provider logs or backups can require additional cleanup; an expired link is not a guarantee that every physical copy has been erased immediately.
Account, subscription, invoice and support records have a different lifecycle from document results. We retain them for as long as needed for the relevant service, support, security, dispute and legal obligations. Contact us about deletion requests and the retention applicable to a particular record.
Selected source files may also be kept temporarily in your browser to carry them between the upload page, workspace and checkout. Expired selections are rejected and removed when that browser storage is read. Browser storage can otherwise remain until it is replaced or you clear site data.
6. Service providers and disclosures
We use providers to deliver the requested service. The current new-site integrations include ConvertAPI for document processing, Supabase for authentication and private storage, Vercel for hosting, Stripe for payment and subscription processing, and Resend for account-email delivery. Account emails can include your email address, account-related message content and secure sign-in or recovery links; document files are not attached to these emails.
The website loads Google Fonts. Requesting these font resources communicates technical request information to Google. Stripe and enabled wallet providers may use their own cookies or security signals when providing payment functions.
Provider information is available from ConvertAPI, Supabase, Vercel, Stripe, Google and Resend. Their roles and retention can differ according to the function they perform.
We may also disclose information where required by applicable law or valid legal process, to investigate misuse or protect rights and safety, or as part of a business transfer subject to applicable safeguards. We do not make uploaded documents publicly searchable through the PDFily dashboard.
8. Processing locations and international transfers
PDFily’s providers may process information in different countries according to their hosting configuration and service arrangements. A private bucket or an EU server region does not by itself establish where every provider, support system or backup processes data.
Contact support@pdfily.org for information about the processing locations and transfer safeguards that apply to your information.
9. Security
The service uses HTTPS, authenticated access checks and private document storage. Card details are handled through Stripe’s payment interface. These measures reduce risk but do not guarantee absolute security.
Keep login links, account credentials, document passwords and downloaded files private. Do not send full payment card details, security codes or unnecessary copies of sensitive documents in a support email.
10. Your privacy rights and requests
Depending on the law that applies, you may have rights to access or receive a copy of your personal information, correct inaccurate information, request erasure, restrict or object to processing, and receive certain information in a portable format. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.
You may also have the right to complain to a data protection supervisory authority. For people in the EEA or UK, contact the authority relevant to your residence, work or the matter concerned. These rights can be subject to applicable conditions and exceptions.
Send requests to support@pdfily.org. Include the email associated with your account and enough information to explain the request. We may need to verify your identity before disclosing or changing personal information. Do not send identity documents unless requested through an appropriate channel.
You can update your profile name in Account settings after signing in. For changes or requests that are not available in the interface, including deletion requests, contact support.
Deleting a document or account does not automatically cancel a recurring subscription. Manage the subscription in Billing & plan or contact support about cancellation as well.
11. California and other regional rights
Where applicable, California residents may request information about the collection and disclosure of their personal information, access or correction, deletion, and other rights provided by relevant privacy law, including applicable rights concerning sale or sharing. Exercising a privacy right should not result in unlawful discrimination.
The information categories described in this notice include account/contact identifiers, commercial and payment records, technical request information and document contents you choose to submit. Use support@pdfily.org to make a request or ask about a regional right. Any request is subject to the applicable law and appropriate verification.
12. Children
PDFily’s terms require users to be at least 18 years old. The service is not intended for children. If you believe a child has supplied personal information, contact us so that the matter can be investigated.
13. Third-party services
Third-party websites and services have their own privacy practices. Review their notices when you use them. Links in this policy identify providers or help explain processing; they do not mean that every provider follows identical retention rules.
14. Changes to this notice
We may update this notice when the service, providers or relevant requirements change. The revised notice will show its update date. Where appropriate, we will provide additional notice or seek consent for a change that requires it.
15. Contact us
Robust Digital Kft., Levente u.14/a, 2161, Csomad, Hungary.
For privacy questions, access/correction/deletion requests or information about service providers, contact support@pdfily.org. Our Terms and Conditions describe the service and subscription terms.