Privacy Notice

Last updated: 11 November 2026

PDFree is the data controller for personal data processed through PDFree.

What we collect and why

• Account data (email, display name, password hash): to create and run your account. Legal basis: contract.
• Documents you save: to provide storage. Deleted automatically 28 days after saving. Legal basis: contract.
• Technical data (IP address, device and usage logs): for security, fraud prevention and improving the service. Legal basis: legitimate interests.
• Support messages: to help you. Legal basis: legitimate interests.

Who we share it with

Hosting and infrastructure providers who process data on our behalf; Paddle, our Merchant of Record, for the sale of subscriptions, payments, tax compliance and invoicing; professional advisers; and authorities where required by law.

Retention

Saved documents are deleted 28 days after saving. Account data is kept while your account is active and deleted or anonymised when no longer needed.

International transfers

Some providers may process data outside the UK/EEA. Where they do, we rely on safeguards such as adequacy decisions or Standard Contractual Clauses.

Your rights

Under UK/EU GDPR you can request access, correction, erasure, restriction, portability, object to processing, and withdraw consent. We respond within one month. You may complain to the Information Commissioner's Office (ico.org.uk).

Security and cookies

We use encryption in transit, access controls and private storage. We use only essential browser storage to keep you signed in; no advertising cookies.