Privacy Policy

Your PDF files are processed on your device, in your browser or in the Mac app. They never leave your device, never reach our servers, and we have no technical ability to see their contents. This is not a policy promise - it is an architectural fact.

We collect the minimum needed to run the service:

• Email address - collected when you create an account, used for sign-in codes and important account notices (receipts, expiry reminders). Stored in the PDFsuite account service (Cloudflare Workers and D1).
• License status - your plan and its dates. Stored in the PDFsuite account service. Updated by Polar when you subscribe or cancel, and by the PDFsuite account service when you activate a plan bought through a partner or join a team.
• Signed licence - a signed licence file is kept on your device so PDFsuite keeps working offline between licence checks. It holds your email, your plan and its end date, if it has one. It is tied to a key created on your device; the private part of that key never leaves the device.
• Saved signatures - signatures and initials you save in the Sign panel are kept only on this device, in your browser or the Mac app. They are never uploaded, and you can delete them in the Sign panel at any time.
• Signed-in devices - a random device ID, a name such as "Mac app" or "Chrome on macOS", and when each device was last used, so your account can work on up to 3 devices at a time (and add up to 6 new devices in any 30 days) and you can sign any of them out from Settings.
• Plans bought through a partner - when you activate a plan bought through a partner, we receive from the partner and store only a licence key, its tier and its status (for example active or refunded), linked to your account. The partner handles the payment; we never see your payment details.
• Teams - if you own a team, you can see the email address and join date of each member. If you join a team, the owner can see your email address and when you joined, and you can see the owner's email address. Anyone who opens your team's invite link sees the team's name and your email address, so share it only with people you want to invite; resetting the link stops the old one working. Membership is stored in the PDFsuite account service; leaving or being removed deletes it.
• Sign-in protection - to stop abuse of sign-in, we keep your IP address (for IPv6, its first half) with your requests to our sign-in service for up to an hour after the last one, then delete it, at most 75 minutes later. Each signed-in session also records the IP address and browser it started from; that record is deleted when you sign out, or within 15 minutes after the session expires.
• Payment data - handled entirely by Polar (our payment processor). We store only a reference ID to link your subscription to your account. We never see your card number.

• The contents, names, or metadata of any PDF files you process.
• Usage analytics on which tools you use or how often.
• IP addresses, apart from the short-lived sign-in records described above and what our hosting providers log at the infrastructure level.
• Tracking cookies. Your sign-in is kept in your browser's local storage.

• Cloudflare - the PDFsuite account service (sign-in, plan, device and team records).
• Resend - delivers sign-in code emails.
• Polar - subscription billing and payment processing.
• Vercel - static hosting and edge delivery.
• GitHub - hosts the Mac app downloads and updates, so it sees the IP address of those requests.

Each of these providers has their own privacy policy governing how they handle data passed to them.

The Mac app checks pdfsuite.co for updates. English OCR is built in; other OCR languages are downloaded once from pdfsuite.co the first time you use them, then work offline. It makes no other network requests apart from account requests (sign-in, licence, billing and device management) with the PDFsuite account service.

We retain your account data (email, license status) for as long as your account is active. If your plan ends and you do not renew within 12 months, we may delete your account data. You can request deletion at any time by emailing us.

You may request a copy of your account data, ask us to correct it, or request deletion. Email hi@pdfsuite.co and we will respond within 30 days.

If we make material changes, we will email registered users before the change takes effect. The date at the top of this page will be updated.

Questions? Email hi@pdfsuite.co.