Privacy policy

The controller of personal data processed through the website and your account is the administrator of the pdfparse.ai service. You can reach the administrator at [email protected] with any question about this policy or your data.

When you upload documents that contain personal data of other people, such as invoices, forms or contracts, you decide what is processed and why. For that content you act as the controller and the PdfParse service processes it on your behalf, only to return your results. Enterprise customers can sign a data processing agreement that sets out these terms in detail.

• Account data, such as your email address, password stored as a hash, the name of your team, seats you invite and your settings.
• Uploaded files and outputs, meaning the PDFs and images you send and the JSON, Markdown, CSV and chunks we return.
• Usage data, such as request ids, timestamps, number of pages, API key used, IP address, browser or client type and error logs.
• Billing data, such as your plan, billing period, invoices and the last digits and expiry of your card. Full card details are handled by our payment processor and never reach our servers.
• Messages you send to [email protected] and our replies.
• Demo files dropped on the website without an account, together with the IP address used to limit demo use.

• To create and run your account, parse your documents and return results. Legal basis is the performance of our contract with you.
• To bill your subscription, issue invoices and keep accounting records. Legal basis is the contract and our legal obligations under tax and accounting law.
• To keep the service secure, prevent abuse, limit demo use and investigate incidents. Legal basis is our legitimate interest in a safe and reliable service.
• To send service emails, such as sign in codes, security notices, billing receipts and changes to these documents. Legal basis is the contract and our legitimate interest.
• To answer your support requests. Legal basis is the contract or, for people without an account, our legitimate interest in replying.
• To understand how the product is used in aggregate and improve it. Legal basis is our legitimate interest. We do not use uploaded files or outputs for this purpose.

Uploaded files and outputs are never used to train AI models, ours or anyone else's.

• Uploaded files and outputs are kept according to your plan, 7 days on Starter, configurable up to 30 days on Growth, and configurable on Scale and Enterprise, where zero retention mode deletes them once the result is delivered.
• Demo files dropped on the website are parsed in your browser and never uploaded.
• You can delete any job and its outputs at any time through the API or the web app.
• Account data is kept while your account exists and deleted within 30 days after you close it, except data we must keep by law.
• Billing records and invoices are kept for the period required by tax and accounting law.
• Usage and security logs are kept for up to 12 months, then deleted or made anonymous.
• Support messages are kept for up to 24 months after the conversation ends.

We share personal data only with providers that help us run the service, under contracts that limit their use of the data to that purpose. We list them by category.

• Hosting provider, which runs our cloud infrastructure and stores data encrypted at rest.
• Payment processor, which handles card payments, subscriptions and fraud checks.
• Email delivery provider, which sends sign in codes, notices and receipts.
• AI model providers, which process files only to return your results and do not train on them.

We may also disclose data when required by law or to protect the rights and safety of users and the service. We do not sell personal data and we do not share it for advertising.

Some providers process data outside the country where you are, including in the United States and the European Economic Area. Where data leaves the European Economic Area, the United Kingdom or Switzerland, we rely on adequacy decisions or standard contractual clauses approved by the European Commission, together with additional safeguards where needed. Enterprise customers can choose an EU or US processing region for their files and outputs.

Data travels over TLS and is encrypted at rest. Access inside the service is limited to the people who need it, and support opens a specific job only when you ask us to and give its request id. Plans from Scale up include an audit log, and Enterprise includes single sign on and roles. More detail is on the secure document processing page.

Depending on where you live, you have the right to:

• access the personal data we hold about you and receive a copy,
• correct data that is inaccurate,
• delete your data, including closing your account,
• restrict processing or object to processing based on our legitimate interest,
• receive your data in a portable, machine readable format,
• withdraw consent where processing is based on consent, without affecting earlier processing,
• lodge a complaint with your local data protection authority.

Residents of California and other US states have equivalent rights to know, delete and correct personal data, and the right not to be treated differently for using them. We do not sell or share personal data for cross context behavioral advertising.

To use any of these rights, email [email protected] from the address linked to your account. We reply within 30 days and may ask you to confirm your identity.

The website and the web app use only essential cookies: a session cookie that keeps you signed in, a security token that protects forms, and a cookie that remembers your preferences, such as monthly or yearly billing view. We do not use advertising pixels or tracking cookies, and we measure visits without cookies. Because only essential cookies are used, there is no cookie banner.

The PdfParse service is meant for businesses and professionals and is not directed at children under 16. We do not knowingly collect their personal data.

We may update this policy when the service or the law changes. The date at the top shows the latest version. If a change materially affects how we use your data, we tell account holders by email before it takes effect.

Questions about this policy or your data go to the administrator of the pdfparse.ai service at [email protected].