Privacy Policy
Last updated: June 27, 2026
This Privacy Policy explains how PDFHandle (“we”, “us”) handles your files and personal data when you use pdfhandle.com (the “Service”). Privacy is central to how the product is built.
Your documents are processed transiently
The contents of the files you upload and the files we generate are processed in memory to perform your requested operation and are deleted automatically shortly after processing (typically within about 15 minutes). We do not retain your document contents, we do not use them to train machine-learning models, and PDF data extraction runs on our own infrastructure — your document contents are not sent to any third-party AI or cloud analysis service.
What we collect
- Account data: your email address, a phone number used for verification, and a securely hashed password.
- Usage metadata: records of conversions (such as file name, detected document type, verification status, and timestamps) and API usage logs — metadata only, never your file contents.
- Billing data: handled by our Merchant of Record, Paddle. We store identifiers needed to manage your subscription (e.g., customer and subscription IDs); we do not store your card details.
- Technical data: limited information such as IP address used for security, rate-limiting, and abuse prevention; and local-storage values such as your session token and theme preference.
How we use data
- To provide, maintain, and improve the Service.
- To verify accounts and prevent fraud and abuse.
- To process payments and manage subscriptions.
- To send transactional messages (verification codes, receipts, service notices).
Service providers
We share the limited data necessary with providers that help us operate, under their respective terms: Paddle (payments & tax, as Merchant of Record), Resend (transactional email), Twilio (SMS verification), and Cloudflare (DNS, email routing, and bot protection), plus our hosting provider. We do not sell your personal data.
Data retention
Document contents are deleted shortly after processing as described above. Account and usage-metadata are retained while your account is active. You can delete your account from Settings, which removes your account, conversion history, API keys, and saved records.
Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data. You can exercise account deletion in Settings, or contact us at [email protected].
Security
We protect data in transit with encryption, store passwords using a slow, salted hash (PBKDF2), and apply rate-limiting and abuse controls. No system is perfectly secure, but we work to safeguard your information.
Children
The Service is not directed to children and is not intended for anyone under the age required to consent to data processing in their jurisdiction.
Changes
We may update this policy; we will revise the date above and, for material changes, provide additional notice.
Contact
Privacy questions or requests: [email protected]. See also our Terms of Service.