Privacy Policy

1. Introduction

SayPDF ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at saypdf.com (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account Information: Email address, name, and password when you create an account
• Payment Information: Credit card details and billing information processed securely through Stripe
• Files: PDF files and other documents you upload for conversion
• Communication Data: Messages you send to us through contact forms or support channels
• Subscription Information: Details about your subscription plans and usage

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information, including:

• IP Address: Your IP address is collected and hashed for security and abuse prevention purposes
• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, conversion types used, and API usage statistics
• Cookies and Tracking Technologies: See our Cookie Policy section below

2.3 Third-Party Information

We may receive information from third-party services:

• Stripe: Payment processing and subscription management
• Google Analytics: Website usage and analytics data
• Sentry: Error monitoring and performance data
• reCAPTCHA: Bot detection and security verification

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To process your file conversions and provide our services
• Account Management: To create and manage your account, process payments, and handle subscriptions
• Communication: To respond to your inquiries, provide customer support, and send service-related notifications
• Security: To detect and prevent fraud, abuse, and unauthorized access
• Analytics: To understand how users interact with our Service and improve our offerings
• Legal Compliance: To comply with legal obligations and enforce our terms of service

4. Data Storage and Retention

4.1 File Storage

• Uploaded files are stored temporarily for processing
• All files are automatically deleted after 24 hours
• Converted files are available for download for 24 hours after conversion
• We do not access, read, or analyze the content of your files except as necessary for conversion

4.2 Account Data

• Account information is retained while your account is active
• You may delete your account at any time, which will remove your personal information
• Some information may be retained for legal or business purposes (e.g., transaction records)

4.3 Analytics and Logs

• Usage statistics and error logs are retained for up to 90 days
• IP addresses are hashed for privacy protection
• Aggregated, anonymized data may be retained longer for analytics purposes

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

• Stripe: Payment processing and subscription management
• Google Analytics: Website analytics and usage tracking
• Sentry: Error monitoring and performance tracking
• Cloud Storage Providers: Temporary file storage and processing

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders, subpoenas, or legal processes
• Government requests or regulatory requirements
• Protection of our rights, property, or safety
• Prevention of fraud or abuse

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

6.1 Types of Cookies

• Essential Cookies: Required for the Service to function (e.g., authentication, session management)
• Analytics Cookies: Help us understand how visitors use our website (Google Analytics)
• Functional Cookies: Remember your preferences and settings

6.2 Third-Party Cookies

• Google Analytics: Tracks website usage and visitor behavior
• Sentry: Monitors errors and performance issues
• Stripe: Processes payments securely

6.3 Cookie Management

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Service.

7. Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted to and from our Service is encrypted using SSL/TLS
• Secure Storage: Personal information is stored in encrypted databases
• Access Controls: Limited access to personal information on a need-to-know basis
• Regular Audits: Security assessments and vulnerability testing
• IP Hashing: IP addresses are hashed using SHA-256 for privacy protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

8.1 Access and Portability

• Request access to your personal information
• Request a copy of your data in a portable format

8.2 Correction and Deletion

• Update or correct your account information
• Request deletion of your personal information
• Delete your account at any time

8.3 Opt-Out Rights

• Opt out of marketing communications
• Disable cookies through browser settings
• Manage your subscription preferences

8.4 Data Processing Objection

• Object to certain types of data processing
• Request restriction of processing

To exercise these rights, please contact us using the information provided in the Contact section below.

9. Children's Privacy

Our Service is not intended for children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We take appropriate measures to ensure your information is protected in accordance with this Privacy Policy, regardless of where it is processed.

If you are located in the European Economic Area (EEA), we comply with GDPR requirements for international data transfers.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to delete personal information we have collected
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information provided below.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes (if you have an account)

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: