Privacy Policy

Last updated: September 24, 2026

This Privacy Policy explains what information aipdf (the Service, we, us) collects when you use our website and document studio, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information we collect

Account data: email address and display name you provide when you register.
Documents & content: the text, images and reference material you upload or create to generate and edit documents.
Usage data: pages visited, features used, browser type and language, device type, and approximate region.
Billing data: processed by our payment provider; we never store full card numbers.

2. How we use your information

To provide, operate and improve the Service, including AI document generation and editing.
To process AI generation requests by sending the content you provide to our or a third-party generation service.
To communicate with you about your account, billing and service updates.
To detect and prevent fraud or abuse, and to comply with legal obligations.

3. Legal bases (GDPR)

We process personal data on the following legal bases: performance of our contract with you; your consent, where we ask for it; our legitimate interest in operating and securing the Service; and compliance with legal obligations.

4. Your rights (GDPR & CCPA)

Access: request a copy of the personal data we hold about you.
Rectification: ask us to correct inaccurate data.
Erasure: request deletion of your data (“right to be forgotten” under GDPR; “request to delete” under CCPA).
Restrict or object: limit or object to certain processing, including withdrawal of consent at any time.
Data portability: receive your data in a machine-readable format.
Do Not Sell / Share: we do not sell your personal data. California residents may opt out of any sharing for cross-context behavioral advertising.

5. Data retention & security

We keep your data only as long as needed to provide the Service or as required by law, and apply industry-standard technical and organizational safeguards such as encryption in transit and at rest, and access controls.

6. Third-party services

We may use service providers for hosting, AI generation, analytics, payments and email. We require they protect your data and use it only to perform services on our behalf.

7. International transfers

Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as standard contractual clauses.

8. Contact

For any privacy request or question, contact us. For GDPR, you may also lodge a complaint with your local supervisory authority.