PDFidelity Privacy Policy

1. Controller and contact details

PDFidelity is an independent product from Andy Geek, who acts as the data controller as an individual developer.

For privacy questions or requests, reach out at andy@andygeek.com.

2. Personal data collected

Account information administered directly by Google via Firebase Authentication, such as your name, email address, and profile photo based on your Google settings.

Google records technical details needed to protect sign-in (e.g., approximate IP, device type, operating system) and keeps them within its own infrastructure.

I do not receive or store your passwords or access tokens; authentication happens entirely within Google services.

Uploaded PDF documents and related metadata while they remain stored under the retention policy that applies to your plan.

Payment and subscription information, such as provider, product, status, amounts, currency, transaction identifiers, renewal dates, and related credits.

Ratings, comments, support messages, feedback, and data needed for internal notifications, including Telegram notification when you submit feedback from the platform.

Messages, indexes, summaries, and technical artifacts from the AI reader when you use that feature.

An irreversible pseudonymous identifier, generated with an HMAC hash of the normalized email address, to remember that the initial free benefit was already used and prevent abuse after account deletion.

Technical analytics, advertising, or measurement identifiers only when you accept non-essential cookies.

3. Purposes and legal bases

Provide the translation service and enable authenticated access through Google (performance of a contract).

Google uses the necessary information to protect sign-in and run its own security safeguards (legitimate interest).

Process translations through third-party artificial intelligence as part of the requested service.

Manage payments, renewals, cancellations, credits, billing, fraud prevention, and purchase support (performance of a contract and legal obligations).

Send transactional communications, security notices, important changes, support, and operational notifications (performance of a contract or legitimate interest).

Measure site use, conversions, and performance through analytics or advertising only when you accept those technologies (consent, where required).

Comply with applicable legal obligations and respond to lawful authority requests.

Send marketing only where there is consent or another valid legal basis, with a reasonable way to opt out.

4. Third-party services and processors

Google Firebase and Google Cloud host authentication, database, storage, cloud functions, translation jobs, and related services.

PDFMathTranslate/PDFMathTranslate-next, pdfidelity_core, and artificial intelligence providers process documents or necessary excerpts to generate translations and AI reading features.

PayPal, Polar, and Google Play process payments, subscriptions, renewals, cancellations, billing, and purchase verification depending on the method you choose.

Cloudflare Turnstile helps prevent abuse and automation in signup forms.

Google Analytics/Firebase Analytics, Vercel Analytics, and Google AdSense load only with consent for measurement, analytics, or advertising.

Telegram is used to receive internal notifications for feedback/ratings that you choose to send from the platform.

These third parties may act as processors, sub-processors, or independent providers depending on the specific service.

5. Data retention

Documents from accounts without an active plan are automatically deleted after a maximum of five days.

Documents from accounts with an active paid plan are kept while there is activity. If 30 days pass without use, an in-app warning is sent and the documents may be deleted 7 days later unless they are used again.

AI reader artifacts associated with a document follow the document deletion flow or are deleted when you clear that feature, as applicable.

Purchase, legal acceptance, cancellation, support, security, and accounting records are kept as long as needed to operate the account, comply with legal obligations, resolve disputes, or prevent fraud.

If you delete your account, a minimal pseudonymous record is kept to prevent the same email from repeatedly receiving the initial free benefit. It does not contain your plain email address, name, or documents.

You can request account deletion; some data may remain in backups for a limited period as legally required.

6. User rights

You may exercise rights of access, rectification, erasure, objection, restriction, and data portability as permitted by law.

If you live in California or another jurisdiction with similar rights, you may also request to know, delete, correct, limit certain uses, opt out of applicable sale or sharing, and not receive discriminatory treatment for exercising your rights.

To exercise them, contact me via the listed email or manage permissions from your Google account linked through Firebase. Requests will be answered within the timelines required by applicable law.

You may withdraw cookie/analytics consent from the Cookie Policy without affecting the lawfulness of prior processing.

7. Security

Reasonable safeguards are in place to protect data against unauthorized access, alteration, or destruction.

No system is infallible; help protect your account by keeping credentials confidential and reporting suspicious access.

8. International transfers

Data may be hosted or processed outside your country, especially in Google Cloud, Firebase, and other providers needed for the service.

Where required, reasonable contractual, technical, or organizational safeguards will be applied. External providers may operate under different jurisdictions with their own legal obligations.

9. Minors

PDFidelity is not directed to minors and does not knowingly collect information from them.

If information from a minor is discovered without proper consent, it will be deleted as soon as possible.

10. Changes to this policy

This Privacy Policy may be updated to reflect legal or operational changes.

The current version will be published with its update date. If there are material changes to data, purposes, or rights, I will try to provide notice through the platform, email, or renewed acceptance when appropriate.

11. Contact

For privacy questions or to exercise your rights, email andy@andygeek.com.