Privacy Policy

Who is responsible

Euclidean Software LLC operates PolyPDF and is responsible for the personal information described here. Contact support@polypdf.com with a privacy question or request. This policy covers polypdf.com, direct purchases, licensing, support, and the desktop app. An employer or organisation operating a collaboration host is responsible for its own handling of shared project data.

Information we receive and why

• Website access: our host receives IP addresses, browser information, requested URLs and request times to deliver pages and downloads, keep services secure and diagnose failures. Avoid putting personal or confidential information into URLs.
• Purchases and licensing: you and Stripe provide checkout email, billing or tax information where applicable, payment status, receipts and order identifiers. We use these to fulfil orders, deliver license keys, provide account access, process refunds and keep required financial records. Stripe handles payment credentials; the website does not collect your full card details.
• Activation and updates: the app contacts licensing and update services with information such as app version, license status, activation timestamps and a random device identifier or its derived hash. These checks manage activation limits, prevent abuse and provide updates. They are separate from optional diagnostics.
• Support and feature requests: we receive your email, correspondence and any files you choose to send. We use them to answer your request and investigate the issue. Please start with a description and avoid sending full license keys, confidential drawings or other people's personal information.
• Optional website measurement: only with your choice, Google Analytics measures visits and interactions and Google Ads measures advertising results. Verified purchase events include an order identifier, value, currency and product, without your email, license key, PDF names or PDF content. Campaign source and UTM codes are stored only with advertising-measurement consent. We do not enable advertising personalization or Google signals in the website tag.
• Optional desktop diagnostics: sharing is off by default and controlled in app settings. Reports can include app and operating-system information, a pseudonymous device identifier, redacted errors and fixed first-use milestones. Redaction aims to remove paths and filenames; do not include sensitive information in reports or support messages.

Information is received from you, your browser or app, and the payment, email and infrastructure providers involved in the service you request. Purchase and activation information is needed to provide a paid license; declining optional tracking does not prevent downloads, purchases or account use.

Your documents and connected features

Core PDF viewing, measurement, markup and editing run locally. The app can keep recovery snapshots, save backups, preferences and recent-file records on your computer. These can contain document data and depend on your computer's access controls and backups; uninstalling the app may leave its support files behind.

Documents may leave your device when you choose to share, export or use a connected workflow. Collaboration uses a customer-managed host and file share. PDF Maps may send map-area or search requests to the chosen map service. Optional timestamping sends a document digest to a timestamp provider. Email, storage, plugins and other services you choose have their own data practices. Review your organisation's policies before using them with confidential work.

Legal bases where UK or European data protection law applies

• Contract: processing necessary to take the steps you request before a purchase, fulfil it, provide licensing and account access, and deliver related support.
• Legitimate interests: securing and maintaining our services, preventing fraud or abuse, and responding to enquiries, subject to your rights and interests.
• Legal obligations: tax and accounting records, legally required disclosures and applicable consumer rights.
• Consent: optional website analytics, advertising measurement and optional desktop diagnostics. Consent can be withdrawn for future collection without affecting processing that was lawful before withdrawal.

Providers and international processing

Providers receive information needed for their role. They include Stripe for payments, fraud prevention and receipts; Resend for transactional email; DigitalOcean for hosting; and, when enabled, Google for website and advertising measurement. Support email and update delivery also involve email and infrastructure providers. Payment providers may act independently for their own fraud-prevention and legal obligations.

These providers may process information in the United States and other countries, whose laws may differ from your own. Their published policies describe their processing locations and transfer arrangements. Contact us to request details of the providers and transfer safeguards relevant to your information. We may also disclose information when required by law or necessary to establish or defend legal claims.

Retention

• License and activation records are retained while needed to service the perpetual license, manage activations, resolve disputes and prevent fraud. Financial and transaction records are kept as required by applicable tax and accounting law.
• PolyPDF-hosted diagnostic errors and opt-in activation milestones expire after 90 days. Expired account magic links and sessions are removed automatically. Sign-in links expire after one hour; an account session lasts up to 30 days or until sign-out.
• Cookie choices are remembered for 180 days. Consented campaign codes and local purchase-deduplication records have a 30-day validity period. Expired local records are removed when the site next checks them; clearing your browser's site data removes them sooner.
• Support correspondence is kept as needed to resolve and follow up on your request, maintain the relevant service history and address legal claims. Operational logs and provider records follow their service and security retention schedules. Contact us about a particular record or a deletion request.

The Cookie Policy describes browser storage separately. Revoking tracking does not automatically erase information already received by providers; contact us for a data-rights request.

Your rights and privacy choices

Depending on your location and the law that applies, you may request access, a copy, correction, deletion or portability of your personal information, restriction of processing, or object to processing based on legitimate interests. You can withdraw optional consent. We may need proportionate verification before responding and may retain information where a legal obligation or another lawful exception applies. We explain a refusal and any available appeal process.

Email support@polypdf.com with your request and the email used for the relevant interaction. Do not send a password, full license key or identity document in the first message. An authorised agent may contact us on your behalf; we may verify their authority. We respond within applicable legal time limits and do not deny access to ordinary website features because you exercise a privacy right.

We do not sell personal information for money. Advertising disclosures can nevertheless count as a “sale” or “sharing” under some privacy laws. Our advertising measurement is off until you allow it. Use Cookie settings / Do not sell or share to refuse or withdraw it. This site honours Global Privacy Control and Do Not Track by keeping all optional website tracking off in that browser. Choices apply to this browser; make the choice on each browser you use.

You may complain to your local data protection authority. UK visitors can contact the Information Commissioner's Office; EEA visitors can contact their national supervisory authority. You do not have to contact us first.

Children and automated decisions

PolyPDF is intended for professional and general desktop document work, not directed at children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided it. We use automated payment and activation checks to enforce license and security rules; contact support if a check incorrectly blocks your purchase or license.

Changes to this notice

We update the date when this notice changes. A new optional tracking purpose requires a new choice before it is enabled. Material changes will be brought to your attention as required by applicable law.