Privacy Policy
To create and use a PDFLeader account, you may be asked to provide an email address and other account information. When you use the Service, we also receive technical and usage information from your browser or device, including IP address, language and time-zone settings, device and browser characteristics, referring pages, cookies or similar identifiers, and information about how you interact with the Service.
PDFLeader processes documents, images, audio, video, text, signatures, form entries, and other files that you choose to upload or create. Because files may contain personal, confidential, or sensitive information, you should upload only content that you are authorized to process. Certain functions, including OCR, translation, transcription, summarization, conversion, and text-to-speech, may use automated technologies and specialized third-party providers to produce the output you request.
We also use service providers for hosting, analytics, customer support, communications, fraud prevention, payment processing, marketing, and advertising. This means that limited categories of personal data may be processed on systems operated by those providers. This Policy explains the categories of data we collect, the reasons for processing, the parties with whom data may be shared, the retention principles we apply, and the rights available to you.
Questions or privacy requests may be sent to support@pdfleader.com.
This Privacy Policy describes how Lopital Limited ("PDFLeader," "we," "us," or "our") collects and processes personal data when you visit https://pdfleader.com, create or use an account, purchase a subscription or other product, contact us, or use the document and media tools made available through the website (collectively, the "Service").
By accessing or using the Service, you acknowledge that you have read this Privacy Policy. The Service is intended for users who are at least 18 years old. If you do not accept the practices described here, do not use the Service; you should also cancel any active subscription and request account or data deletion where appropriate.
Translations are supplied for convenience. If a translated version differs from the English version, the English version will control to the extent permitted by applicable law.
In this Policy, "personal data" or "personal information" means information that identifies, relates to, describes, or can reasonably be linked to an individual or household, as defined under applicable law. "Process" includes collecting, using, storing, accessing, analyzing, transmitting, disclosing, and deleting data. References to the "EEA and UK" include the European Economic Area and the United Kingdom.
Lopital Limited, with its registered address at Ezekia Papaioannou 14, Flat/Office 101, 1075 Nicosia, Cyprus, is the controller of personal data processed for the purposes described in this Privacy Policy.
When you upload files containing personal data about other individuals, you are responsible for ensuring that you have an appropriate legal basis, authorization, and any required notices or consents for that processing. PDFLeader processes such content to provide the functions you select and for the other limited purposes described below.
We collect information that you provide directly and information generated automatically when you use the Service. The precise categories depend on the features you use, your device and settings, your location, and whether you have an account or paid subscription.
2.1. Information you provide directly
2.1.1. Identifiers and contact details
You may provide your name, email address, country or region, and other contact details when you create an account, purchase the Service, communicate with support, complete a form, or otherwise contact us.
2.1.2. Account information
Account information includes your login credentials, user or account identifier, account preferences, subscription status, language, saved settings, and information used to authenticate or secure the account. Passwords are stored using security protections designed for authentication rather than in readable form.
2.1.3. Purchase and transaction information
When you purchase a subscription, trial, add-on, or other paid feature, payment information is submitted to our payment service providers. We do not receive or store your complete payment-card number. We may receive limited transaction data, such as a payment token, card brand and limited digits, billing country, product or plan, purchase amount, currency, transaction date and time, renewal or cancellation status, and payment or refund outcome.
2.1.4. Files, documents, and other user content
The Service accesses and may store the documents, images, forms, signatures, text, audio, video, and other content that you upload, import, create, edit, convert, sign, translate, transcribe, summarize, or otherwise process ("User Content"). User Content may contain personal information about you or other individuals, including information that is sensitive under applicable law. We process User Content to perform the functions you request and as otherwise described in this Policy.
If you upload a document without subsequently registering an account, we temporarily process the content of that document solely for the purpose of providing the requested Service function. Such files are automatically and permanently deleted from our systems within 3 to 7 days of upload.
2.1.5. Signatures, form entries, and document metadata
When you use signing, form-filling, editing, or document-management tools, we may process a signature image or drawing, initials, typed entries, annotations, dates, fields, file names, file type, file size, page count, document properties, and other metadata associated with the document or operation. A signature processed through the Service is used to place or reproduce the signature as directed by you; we do not use it to authenticate your identity unless a feature expressly states otherwise.
2.1.6. Voice recordings and audio or video content
Transcription and related functions may process audio tracks, voice recordings, video files, and spoken content using automatic speech-recognition or other automated technology. We use this material to create the transcription, summary, translation, text, audio, or other output you request. We do not use voice recordings to identify or authenticate you.
2.1.7. Communications and feedback
We process information you include in support requests, emails, contact forms, complaints, refund requests, surveys, reviews, and other communications. This may include the message content, attachments, account and transaction details, troubleshooting information, and our response history.
2.2. Information collected automatically
2.2.1. Referral and campaign information
We may record the website, application, advertisement, campaign, search term, or URL that referred you to PDFLeader, together with related attribution parameters.
2.2.2. Device, browser, network, and approximate-location information
We may collect IP address, browser type and version, operating system, device type and model, device and browser settings, language, time zone, Internet service provider, mobile carrier, screen characteristics, hardware or device identifiers, and approximate country, region, or city inferred from the IP address. We do not collect precise GPS location unless a feature specifically requests it and you grant permission.
2.2.3. Usage, event, and diagnostic data
We record interactions with the Service, including pages and tools viewed, buttons selected, features used, files processed, processing status, session duration, purchases, subscription events, errors, crash information, response times, and other logs needed to operate, secure, analyze, and improve the Service. Where feasible, analytics events use account or device identifiers rather than the content of your files.
2.2.4. Cookies, advertising identifiers, and similar technologies
We and our providers may use cookies, local storage, pixels, web beacons, software development kits, and similar technologies. Depending on your device and settings, providers may also receive advertising or device identifiers such as an Apple advertising identifier or Google advertising identifier. These technologies support authentication, preferences, security, analytics, attribution, advertising, and measurement. For details and available controls, see the PDFLeader Cookie Policy and the cookie-preference tool displayed on the Website.
3.1. To provide and operate the Service
We process account data, User Content, technical information, and usage data to create and manage accounts; provide access to subscribed features; upload, store, display, edit, sign, convert, merge, split, compress, scan, translate, transcribe, summarize, extract, or otherwise process files; generate requested output; save settings and files; restore sessions; and maintain the availability and performance of the Service.
Some automated functions may use specialized technology providers. For example, we may use OpenAI services or other artificial-intelligence, speech-recognition, translation, OCR, or file-processing providers to process the material submitted to a relevant feature and return the requested output. Data sent to a provider is limited to what is reasonably necessary for that function and is governed by our arrangements with the provider and the provider's applicable privacy terms. To learn more, please visit OpenAI Privacy Policy.
3.2. To provide customer support
We use account, transaction, technical, and communication information to answer questions, investigate technical issues, handle complaints, respond to refund or cancellation requests, protect accounts, and provide other assistance. We may use a customer-support platform, such as Zendesk or a comparable provider, to organize, prioritize, and respond to support communications. To learn more, please visit this Privacy Policy.
3.3. To communicate with you about the Service
We may send transactional and service communications concerning account creation, authentication, purchases, receipts, renewals, cancellations, refunds, security, changes to the Service, updates to legal terms, and other matters connected with your use. Certain service communications are necessary and cannot be disabled while you maintain an account or subscription.
We may use email-validation and delivery services, such as ZeroBounce or comparable providers, to reduce invalid or abusive addresses and improve deliverability. These providers may temporarily process an email address and validation result for that purpose.
3.4. To analyze, maintain, and improve the Service
We process device, usage, transaction, diagnostic, and limited content-related information to understand how the Service is used; measure performance; identify errors; prevent abuse; evaluate conversion and retention; test changes; develop new features; and improve usability, reliability, accuracy, and customer experience.
Analytics and behavior-measurement providers may include Amplitude, Google/Firebase, AppsFlyer, Microsoft Clarity, Hotjar, and comparable services. These providers may receive device information, online identifiers, page and event data, campaign information, and interaction data. Session-replay or heatmap tools are configured to reduce the capture of sensitive fields, but you should not enter unnecessary confidential information into Website fields. Amplitude provides more information on how they process data in its Privacy Policy. Firebase Privacy information. Google's Privacy Policy. Clarity's Data Privacy and Security Policy. Hotjar's Privacy Policy.
We may also perform restricted first-party analysis of User Content or derived metadata to diagnose processing failures, assess output quality, improve a tool, or understand feature use. Access is limited to authorized personnel or providers with a business need, and we seek to use aggregated, de-identified, sampled, or minimized information where reasonably possible.
3.5. To send marketing communications
Subject to applicable law, we may use contact, account, purchase, campaign, and usage information to send information about PDFLeader products, features, promotions, surveys, or offers. We may use Customer.io or another communications platform to manage email or in-product messages. You can unsubscribe from marketing email through the link in the message; doing so does not stop necessary service communications. Customer.io Privacy Policy.
3.6. To advertise and measure advertising
We and our advertising partners use cookies, pixels, identifiers, and event information to measure campaigns, limit repeated ads, build audiences, and show ads that may be more relevant. For example, a partner may receive an event indicating that a browser visited PDFLeader or completed a purchase, without receiving the file processed through the Service.
How to opt out or influence personalized advertising
iOS: On your iPhone or iPad, go to Settings > Privacy > Apple Advertising and deselect Personalized Ads.
Android: To opt-out of ads on an Android device, go to Settings > Privacy > Ads and enable Opt out of Ads personalization. In addition, you can reset your advertising identifier in the same section (this also may help you to see less of personalized ads). To learn even more about how to affect advertising choices on various devices, please look at the information available here.
macOS: On your MacBook, you can disable personalized ads: go to System Preferences > Security & Privacy > Privacy, select Apple Advertising, and deselect Personalized Ads.
Windows: On your laptop running Windows 10, you shall select Start > Settings > Privacy and then turn off the setting for Let apps use advertising ID to make ads more interesting to you based on your app activity. If you have other Windows version, please follow the steps here.
To learn even more about how to affect advertising choices on various devices, please look at the information available here.
In addition, you may get useful information and opt out of some interest-based advertising, by visiting the following links:
- Network Advertising Initiative – https://optout.networkadvertising.org/
- Digital Advertising Alliance – https://optout.aboutads.info/
- Digital Advertising Alliance (Canada) – https://youradchoices.ca/
- Digital Advertising Alliance (EU) – https://www.youronlinechoices.com/
- DAA AppChoices page – https://www.aboutads.info/appchoices
Browsers: It is also may be possible to stop your browser from accepting cookies altogether by changing your browser's cookie settings. You can usually find these settings in the "options" or "preferences" menu of your browser. The following links may be helpful, or you can use the "Help" option in your browser.
- Cookie settings in Internet Explorer
- Cookie settings in Firefox
- Cookie settings in Chrome
- Cookie settings in Safari web
- Cookie settings in iOS
Google allows its users to opt out of Google's personalized ads and to prevent their data from being used by Google Analytics.
We value your right to influence the ads that you see, thus we are letting you know what service providers we use for this purpose and how some of them allow you to control your ad preferences.
Google Ads is an ad delivery service provided by Google that can deliver ads to users. In particular, Google allows us to tailor the ads in a way that they will appear, for example, only to users that have conducted certain actions with our Website (for example, show our ads to users who have made a purchase). Some other examples of events that may be used for tailoring ads include, in particular, visiting our Website. Google allows its users to opt out of Google's personalized ads and to prevent their data from being used by Google Analytics.
We use Microsoft Advertising to promote our Services. You may find more info on how we do it in Microsoft Advertising privacy policy.
3.7. To process payments and administer subscriptions
We use payment processors, acquiring banks, card networks, and related providers to authorize and process purchases, recurring charges, refunds, chargebacks, and fraud checks. Payment credentials are submitted directly to the processor; PDFLeader receives confirmation and limited transaction information needed to provide the purchase and maintain accounting records.
3.8. To protect the Service, enforce agreements, and prevent fraud
We process personal data to authenticate users; detect suspicious, automated, abusive, or unauthorized activity; protect files and accounts; investigate payment disputes; enforce the Terms and Conditions of Use and other agreements; establish, exercise, or defend legal claims; and protect PDFLeader, users, providers, and third parties.
3.9. To comply with legal obligations
We may process, preserve, or disclose information to comply with applicable laws, tax and accounting obligations, court orders, subpoenas, lawful government requests, sanctions requirements, consumer-protection rules, data-protection obligations, or other binding legal process.
3.10. Corporate transactions and business administration
We may use and disclose information for audits, financing, insurance, due diligence, restructuring, merger, acquisition, sale of assets, insolvency, or another corporate transaction, subject to appropriate confidentiality and legal safeguards.
This section applies where the GDPR, UK GDPR, or a similar European data-protection law requires us to identify a legal basis. The applicable basis depends on the category of data and the purpose.
4.1. Performance of a contract
We rely on contractual necessity to:
- create and administer your account;
- provide the document, media, storage, and subscription functions you request;
- process purchases, recurring payments, refunds, and subscription changes;
- provide customer support and essential service communications; and
- take steps requested by you before entering into a contract.
4.2. Legitimate interests
We may rely on legitimate interests, balanced against your rights and reasonable expectations, to:
- operate, secure, troubleshoot, and improve the Service;
- analyze feature use, performance, transactions, and customer experience;
- communicate about related products or unfinished transactions where permitted by law;
- prevent fraud, abuse, chargeback misuse, and unauthorized access;
- enforce agreements and protect legal rights;
- respond to complaints, disputes, and legal claims;
- conduct business administration, audits, and corporate transactions; and
- use aggregated or de-identified information for research and planning.
You may object to processing based on legitimate interests in circumstances provided by law. We will stop the relevant processing unless we demonstrate compelling legitimate grounds or the processing is required for legal claims.
4.3. Consent
We rely on consent where required, including for non-essential cookies, personalized advertising, certain marketing communications. You may withdraw consent at any time through the available settings or by contacting us. Withdrawal does not affect processing that occurred before withdrawal.
4.4. Compliance with legal obligations
We process information where necessary to satisfy legal, regulatory, tax, accounting, consumer-protection, security, or law-enforcement obligations.
Depending on your location and applicable law, you may have some or all of the rights below. Rights are subject to legal conditions, limitations, and exemptions.
Access and confirmation. You may request confirmation of whether we process your personal data and obtain access to relevant information or a copy.
Correction. You may ask us to correct inaccurate personal data and complete information that is materially incomplete.
Deletion. You may request deletion of personal data, subject to retention required for legal obligations, fraud prevention, security, disputes, or other permitted purposes.
Restriction. You may ask us to limit certain processing while a request, objection, or accuracy question is reviewed.
Objection. You may object to processing based on legitimate interests and may object at any time to direct marketing.
Portability. Where applicable, you may request personal data you provided in a structured, commonly used, machine-readable format and ask that it be transmitted to another controller where technically feasible.
Withdrawal of consent. Where processing relies on consent, you may withdraw consent without affecting prior lawful processing.
Complaint. You may lodge a complaint with a competent data-protection authority, particularly in the country or region where you live, work, or believe an infringement occurred.
Non-discrimination. Where U.S. state law applies, you have the right not to receive unlawful discriminatory treatment for exercising a privacy right.
You may review or change certain account information through the Service. To exercise a right that is not available in your account, email support@pdfleader.com and describe the request. We may ask for information reasonably necessary to verify your identity, account ownership, authority, and jurisdiction. We will use verification information only for the request and related recordkeeping.
You may use an authorized agent where permitted by law. We may require evidence of the agent's authority and may ask you to verify your identity or confirm the request directly. We will respond within the period required by applicable law and will explain any denial or limitation.
The Service is not intended for persons under 18 years of age, and we do not knowingly collect personal data from children under 18. If you believe that a person under 18 has provided personal data through the Service, contact us so that we can review and take appropriate action. We may request information needed to verify the report.
PDFLeader and its providers may process information in the United States and other countries that may have data-protection rules different from those in your country. The locations used depend on the provider, the feature, and service availability.
Where personal data originating in the EEA or UK is transferred to a country not recognized as providing an adequate level of protection, we use an appropriate transfer mechanism where required, such as the European Commission Standard Contractual Clauses, the UK International Data Transfer Addendum or Agreement, an adequacy decision, or another lawful safeguard. We also apply supplementary technical and organizational measures where appropriate.
We may update this Privacy Policy to reflect changes in the Service, technology, providers, legal requirements, or our business practices. The "Last updated" date identifies the current version. When required by law, we will provide additional notice or obtain consent before a material change takes effect. Previous versions may be requested by contacting us.
10.1. Applicability and scope
This section supplements the rest of the Privacy Policy for residents of U.S. states with applicable comprehensive consumer privacy laws. For California residents, it also serves as a Notice at Collection. Terms such as "personal information," "sale," "sharing," "targeted advertising," and "sensitive personal information" have the meanings assigned by the applicable state law.
We do not sell personal information for monetary payment. Certain disclosures through advertising cookies, pixels, or similar technologies may nevertheless be treated as a "sale," "sharing," or use for targeted advertising under some state laws.
10.2. Categories collected, sources, and business purposes
The table summarizes categories we may collect. Whether a category is collected from a particular person depends on the features used. Sources include you, your browser or device, payment and service providers, advertising and analytics partners, and information generated from your use of the Service.
| Category | Examples | Purposes |
|---|---|---|
| Identifiers | Name, email address, account or user ID, IP address, device and cookie identifiers, and a limited payment token or card details. | Account administration; Service delivery; support; security; analytics; advertising; payments; and legal compliance. |
| Customer records and account information | Contact details, subscription status, account preferences, support records, and transaction information. | Provide and administer accounts and subscriptions; process payments and refunds; support users; maintain records; enforce agreements. |
| Commercial information | Products or plans considered or purchased, purchase and renewal history, payment status, refunds, chargebacks, and feature usage. | Process transactions; administer subscriptions; measure and improve offers; prevent fraud; marketing and advertising; accounting and legal compliance. |
| Internet or other electronic network activity | Pages and features used, interactions with the Website or ads, referral data, session and event logs, browser and device information, diagnostics, and cookie data. | Operate, secure, troubleshoot, analyze, personalize, advertise, and improve the Service; measure campaigns; prevent abuse. |
| Approximate geolocation | Country, region, or city inferred from IP address. | Localization; fraud and security controls; legal compliance; analytics; advertising measurement. |
| Audio, electronic, visual, or similar information | Documents, images, signatures, audio, video, voice recordings, and other files or content submitted to a feature. | Perform requested editing, conversion, signing, OCR, translation, transcription, summarization, storage, and related functions; troubleshoot and improve quality. |
| Sensitive personal information | Account login credentials; precise content that may reveal sensitive characteristics; payment authentication information. | Secure accounts; provide requested file-processing functions; process payments; comply with law. We do not use sensitive personal information to infer characteristics about you except as necessary to provide a function you request or as permitted by law. |
| Inferences | Limited inferences about likely interests, preferred features, or likelihood of purchasing or continuing a subscription, based on interactions with the Service. | Improve user experience, offers, product development, advertising relevance, and campaign measurement. We do not use these inferences to make decisions that produce legal or similarly significant effects. |
We retain each category only for as long as reasonably necessary for the stated purposes, taking account of account status, file and feature settings, legal and accounting obligations, fraud and security needs, disputes, and applicable limitation periods. See Section 11.
10.3. Disclosure for business purposes
During the preceding 12 months, we may have disclosed each category listed above to the provider categories described in Section 5 for business purposes. For example, identifiers and network-activity information may be disclosed to hosting, security, analytics, support, communications, payment, and advertising providers; User Content may be disclosed to hosting and specialized processing providers only as needed to perform the selected function.
10.4. Sale, sharing, and targeted advertising
We do not sell personal information for money. We may allow advertising and analytics partners to collect identifiers, Internet or network activity, approximate location, and commercial-event information through cookies, pixels, or similar technologies. Under some state laws, these activities may be considered a sale, sharing, or targeted advertising.
| Category of information disclosed | Categories of recipients |
|---|---|
| Identifiers, including cookie IDs, IP address, device identifiers, and a hashed email address where used for matching. | Advertising networks, analytics and measurement providers, and social-media platforms. |
| Internet or other electronic network activity, including pages viewed, links selected, ad interactions, and campaign events. | Advertising networks, analytics and measurement providers, and social-media platforms. |
| Commercial information, such as whether a subscription or other product was purchased. | Advertising networks, analytics and measurement providers, and social-media platforms. |
| Approximate geolocation inferred from IP address. | Advertising, analytics, attribution, security, and fraud-prevention providers. |
To opt out of non-essential advertising cookies, use the cookie-preference tool on the Website. You may also email support@pdfleader.com with the subject "Opt Out of Sale, Sharing, or Targeted Advertising." Opt-out choices made through cookies are generally browser- and device-specific and may need to be renewed after cookies are cleared or when a different browser or device is used.
We do not knowingly sell or share the personal information of individuals under 18 for targeted advertising.
10.5. State privacy rights
| Right | Description |
|---|---|
| Right to know | Request information about categories collected, sources, purposes, categories of recipients, and applicable sales, sharing, or disclosures. |
| Right to access | Request a copy of the specific personal information we maintain about you, subject to verification and legal limitations. |
| Right to delete | Request deletion of personal information, subject to exceptions for security, fraud prevention, legal obligations, transactions, and other permitted purposes. |
| Right to correct | Request correction of inaccurate personal information, taking into account the nature and purpose of the data. |
| Right to data portability | Receive eligible personal information in a portable and, where technically feasible, readily usable format. |
| Right to opt out | Opt out of sales, sharing, targeted advertising, and certain profiling where provided by applicable law. |
| Right to limit sensitive information | Where applicable, direct us to limit use or disclosure of sensitive personal information to permitted purposes. We use sensitive information only for the purposes described in this Policy and do not use it to infer characteristics except as needed for a requested service or as permitted by law. |
| Right to withdraw consent | Withdraw consent where a state law requires consent for particular processing. |
| Right to non-discrimination | Exercise applicable privacy rights without unlawful discrimination or retaliation. |
| Right to appeal | Appeal a denial of a privacy request in states that provide an appeal right. |
10.6. Submitting and verifying a request
Submit a request by emailing support@pdfleader.com. Identify the right you wish to exercise and the state in which you reside. To verify the request, we may compare information you provide with account or transaction records, such as your email address, account-creation date, purchase date, last activity, or subscription details. We may request additional proof where reasonably necessary, but we will not require more information than appropriate for the request.
10.7. Authorized agents
An authorized agent may submit a request where permitted by law. We may require a valid power of attorney or written authorization and may separately ask the consumer to verify identity and confirm the request.
10.8. Appeals
If we deny a request and applicable law provides an appeal right, you may appeal by replying to our decision or emailing support@pdfleader.com with the subject "Privacy Request Appeal." We will review the appeal and explain the outcome within the legally required period.
We retain personal data for the period reasonably necessary to provide the Service, complete transactions, maintain account and subscription records, honor preferences, prevent repeated abuse of trials or promotions, detect fraud, comply with tax and accounting rules, resolve disputes, enforce agreements, and meet other legal obligations.
Retention varies by data type. Documents uploaded without an account (guest uploads) are automatically and permanently deleted from our systems within 3-7 days of upload. Account and transaction records may be retained after account closure for legal, accounting, fraud-prevention, and dispute purposes. Support communications may be retained to document requests and improve support. Cookies and analytics records are retained according to their settings and provider schedules. User Content is retained in accordance with the feature, account, subscription, and storage settings applicable to the Service and may remain temporarily in backups or processing systems after deletion.
We may retain information longer when it is relevant to a complaint, chargeback, investigation, litigation, legal hold, or other proceeding. When personal data is no longer required, we delete, anonymize, or isolate it in accordance with reasonable operational procedures, subject to backup and legal constraints.
We use reasonable administrative, technical, and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Measures may include encryption in transit, access controls, logging, authentication safeguards, and procedures for responding to security incidents.
No method of transmission, processing, or storage is completely secure. You are responsible for protecting your credentials, using a trusted device and network, maintaining copies of important files, and avoiding the upload of information that is not needed for the selected function. Notify us promptly at support@pdfleader.com if you suspect unauthorized access to your account.
For questions about this Privacy Policy, previous versions, your account, or the processing of personal data, contact:
Lopital Limited
Ezekia Papaioannou 14, Flat/Office 101, 1075 Nicosia, Cyprus
support@pdfleader.com