Privacy and Security
Last updated: 2025-10-01
We process files and related data in a secure environment. Translated PDFs are retained temporarily and deleted 24 hours after processing. We do not disclose file contents to third parties except as necessary to provide the Service or when you expressly authorize support access via the 'Report bug' feature.
We use Google Analytics 4 to collect aggregated, anonymized metrics about product usage and traffic. We do not send the contents of uploaded files to Google Analytics. Analytics data helps us improve the Service. You can opt out through your browser privacy settings or standard opt‑out tools.
Storage and retention: Files uploaded for processing are stored temporarily in secure object storage (S3/R2). Translated files are removed after 24 hours. Job metadata, logs and transaction records are retained in our database (Supabase) for a limited time for auditing, support and billing purposes.
Third-party services: We use trusted third-party providers to operate the Service, including Clerk (authentication), Stripe (payments), Supabase (database) and S3-compatible object storage (R2). These providers may process limited metadata necessary for their services; we do not share the contents of uploaded files with payment providers.
Cookies and tracking: We use cookies and similar technologies to provide authentication (Clerk), session management and core functionality. Third-party analytics (Google Analytics 4) uses cookies for aggregated metrics. You may control or disable cookies via your browser settings, although some features of the Service may be affected.
Your rights: Subject to applicable law, you may have the right to access, correct, port or delete your personal data. To exercise these rights, contact us at the address below. We will handle requests in accordance with applicable data protection laws.
Privacy contact: For privacy requests or questions, email: contact@pdf-translator.app
Legal basis: We process personal data when necessary to perform the Service (contract performance), to comply with legal obligations (e.g., accounting and payments), and on legitimate interests for service operation, security and improvement. Where applicable, processing is carried out in accordance with GDPR, LGPD and other relevant laws.