Version 1.0 · Last updated: September 15, 2026
The data controller for this Service is:
2.1 Information You Provide Directly
2.2 Information We Collect Automatically
| Purpose | Legal Basis |
|---|---|
| Provide and maintain the Service | Contract performance |
| Billing and payment processing | Contract performance |
| Customer support | Contract performance / Legitimate interest |
| Service notifications (billing, security, policy updates) | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Product optimization and analytics | Legitimate interest |
| Legal compliance | Legal obligation |
We may aggregate or de-identify data for statistical analysis. Such data cannot be identified to a specific individual.
| Type | Purpose | Can Be Disabled |
|---|---|---|
| Strictly Necessary | Maintain login, core functionality | No |
| Functional | Language preferences, personalized settings | Yes |
| Analytics | Anonymous usage statistics, product optimization | Yes |
| Marketing (if applicable) | Targeted advertising and performance measurement | Yes |
You can adjust cookie preferences through your browser settings or our Cookie Management Center.
We do not sell your personal information, including as "sale" is defined under applicable laws such as CCPA. We only share information in the following circumstances:
In the event of a security incident affecting your rights, we will notify you and relevant supervisory authorities within 72 hours of discovery, as required by applicable law. Please keep your account credentials secure and do not share them with anyone.
| Data Type | Retention Period | Disposal on Expiry |
|---|---|---|
| Account information | During active subscription; 90 days after account deletion | Delete or anonymize |
| Transaction records | As required by law (typically 5–7 years) | Delete or archive |
| Support records | 3 years | Secure deletion |
| Security audit logs | 12 months | Secure deletion |
| Uploaded PDF content | Until user deletes or account is closed | Secure deletion |
To exercise any of the following rights, please contact us. We will process your request within 30 calendar days.
| Right | Description |
|---|---|
| Right to be informed | Understand what data we collect and how we use it |
| Right of access | Obtain a copy of your personal data |
| Right to rectification | Correct inaccurate or incomplete information |
| Right to erasure | Request deletion of data under specific conditions |
| Right to restrict processing | Request suspension of data processing under specific conditions |
| Right to data portability | Receive your data in a machine-readable format |
| Right to object | Object to processing based on legitimate interests or marketing |
| Right to withdraw consent | Withdraw consent for processing based on consent |
If you believe your data has not been handled properly, you have the right to lodge a complaint with your local data protection authority.
With your consent, we may send marketing information about our Service via email or in-app notifications. You can unsubscribe at any time by clicking the "unsubscribe" link in any marketing email, disabling marketing notifications in Account Settings, or contacting us. Opting out does not affect service-related notifications such as billing, security alerts, or policy updates.
Our servers and service providers may be located in various regions, including Singapore, the United States, and mainland China (where Alibaba Cloud and our payment processing providers operate). When data is transferred across borders, we protect it through:
This Service is intended for users who are at least 18 years old. We do not knowingly collect information from minors under this age. If you believe your child has provided us with personal information, please contact us immediately at privacy@pdfchat.tech and we will promptly delete it.
This Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy applies only to information we collect directly. We are not responsible for the data practices of third parties, and we recommend reviewing their privacy policies before using their services.
We may update this Privacy Policy from time to time. Material changes will be communicated at least 15 days in advance via email notification or a notice on our website. The "Last Updated" date at the top of this page will be revised accordingly. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.