Privacy Policy

This policy covers two different groups of people: account holders (people who sign in and share PDFs) and viewers (people who open a shared link). What we collect is different for each.

1. Information we collect

If you create an account:

• Your name and email, from Google sign-in
• The PDF files you upload, and any edits you make to them
• Share link settings you configure (labels, passwords — stored as a hash, never in plain text — expiry dates, download permissions)

If you open a shared link (as a viewer):

• An anonymous identifier stored in your browser, used to recognize repeat visits to the same link
• Which pages you viewed, how long you spent on each, and when
• Your name and email, but only if the sender enabled "require name & email before viewing" for that specific link, and only after you voluntarily provide it
• General technical data like browser type and approximate location, collected via Google Analytics

2. How we use this information

• To provide the editing, sharing, and tracking features of the Service
• To show account holders the analytics for links they've created
• To send emails when an account holder chooses to email a share link to a recipient
• To understand overall site usage and improve the Service

3. Third parties we use

We rely on a small number of infrastructure providers to run the Service:

• Supabase — authentication, database, and file storage
• Vercel — application hosting
• Google — sign-in (OAuth) and site analytics (Google Analytics)
• Resend — delivering emails when you choose to send a share link by email

Each of these processes data according to their own privacy policies, in addition to this one.

4. Cookies & local storage

We use browser storage (cookies and similar technologies) to keep you signed in, recognize repeat visits to a shared link for accurate tracking, and for Google Analytics. We don't use advertising cookies or sell data to advertisers.

5. How long we keep data

Account data and uploaded PDFs are kept as long as your account is active. If you upload a PDF as a guest without signing in, it's stored temporarily in your own browser and automatically removed after 24 hours if never saved to an account.

6. Your rights

You can request access to, correction of, or deletion of your data at any time via our Contact page. If you're a viewer who was asked to provide your name and email through a shared link, you can contact us directly, or reach out to the person who shared the link with you, since they're the one who chose to collect it.

7. Children's privacy

The Service isn't directed at children, and we don't knowingly collect information from children.

8. Security

We use industry-standard measures to protect your data, including access controls on our database and encrypted storage. No system is perfectly secure, and we can't guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. We'll update the date at the top of this page when we do.

10. Contact

Questions about this policy or your data? Reach out via our Contact page.