Privacy policy

Last updated 9 October 2026

This policy explains what personal data Your Company OÜ ("we") processes when you use PDF Edit at https://pdf.andz.ee, why, and your rights. We are the data controller. Contact us at support@example.com or by post at Address, City, Country.

Your documents

We don't store your files. The editor runs in your web browser: files are opened, edited, converted, recognized (OCR), and saved on your device.

Two features send content off your device, and only when you use them:

  • AI features (the copilot, proofreading, the thesaurus, and AI conversions) send the text of the relevant pages, and sometimes an image of a page, through our server to Google's Gemini API to produce the answer. We send these requests with storage turned off, we don't keep them, and Google processes them as our processor under its paid API terms, which exclude using them to train its models.
  • Importing a web page sends the address you enter to our server, which downloads that page and passes it back to your browser. We don't keep the page.

To protect your work against a closed tab, the document you are editing is kept in your browser's storage (IndexedDB) on your device until you open another file. A signature you create is kept in your browser's local storage. You can remove both at any time by clearing this site's data in your browser settings.

What we process

  • Account data: your email address and name, and the profile details of a Google or Microsoft account if you sign in with one, plus usage counters for the free trial. Used to run your account and subscription. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
  • Payment and billing details, if you buy Pro: collected by Polar, our merchant of record, on its checkout page; we do not see or store card numbers. Polar tells us whether your subscription is active and when it renews. Legal basis: contract and legal obligation (Art. 6(1)(b) and (c)).
  • Technical data: your IP address and request details are processed by our hosting provider to deliver the site, and briefly held in memory to limit abuse of the sign-in form. Server logs are kept for up to 30 days. Legal basis: legitimate interest in running a secure service (Art. 6(1)(f)).
  • Usage statistics: which pages are visited, the referring site, country, browser and device type, and page-load performance (Core Web Vitals), measured with Vercel Web Analytics and Speed Insights. They use no cookies and no identifiers that follow you across sites or days, and they never see your documents. Legal basis: legitimate interest in understanding and improving the service (Art. 6(1)(f)).

We do not use advertising or tracking cookies, and we do not sell personal data.

Cookies

We use cookies only to keep you signed in (set by our authentication provider, Clerk) and to remember your language. They are strictly necessary for the service, so they do not require consent.

Processors

  • Clerk, Inc. – accounts and sign-in.
  • Polar Software, Inc. – merchant of record for Pro: checkout, payments, invoices, and taxes (an independent controller for payment data).
  • Google LLC – the Gemini API, for the AI features you use.
  • Vercel Inc. – hosting the website, and the cookieless usage statistics above.

Where a processor transfers data outside the European Economic Area, it does so under the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep data

Account and billing data are kept while you have an account and afterwards for as long as accounting law requires (generally 7 years for invoices).

Your rights

You have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. Email us to exercise them; we respond within one month. You can also lodge a complaint with your data protection authority (in Estonia, the Andmekaitse Inspektsioon, aki.ee).

Changes

If we change this policy in a way that matters, we'll update the date above and tell subscribers by email.