गोपनीयता नीति

Data Controller

PDFlys, Kingdom of Saudi Arabia, is the data controller responsible for your personal data. For privacy inquiries, contact us at privacy@pdflys.com.

हमारा मूल वादा

PDFlys एक सरल सिद्धांत पर बना है: आपकी फ़ाइलें आपकी हैं। PDFlys में आप जो भी PDF खोलते हैं, वह पूरी तरह से आपके वेब ब्राउज़र में प्रोसेस होता है। आपकी फ़ाइलें कभी हमारे सर्वर पर अपलोड नहीं होतीं, और हमारे पास आपके दस्तावेज़ों तक पहुँचने, पढ़ने या संग्रहीत करने की कोई क्षमता नहीं है।

Whether you're using our merge PDF, split PDF, compress PDF, or PDF editor tools — all processing happens locally in your browser for complete privacy.

हम कौन सा डेटा एकत्र करते हैं

आपकी संपादित फ़ाइलें

कोई नहीं। PDFlys 100% आपके ब्राउज़र में JavaScript का उपयोग करके काम करता है। आपकी PDF फ़ाइलें कभी आपके डिवाइस से बाहर नहीं जातीं। हम किसी भी सर्वर पर आपकी फ़ाइलें अपलोड, प्रसारित, संग्रहीत या प्रोसेस नहीं करते।

Account Information

When you sign in via Google, we store your display name and email address for authentication purposes. Your marketing email consent preference is stored in Firestore and can be changed at any time from your Settings page.

If you choose not to create an account, you can still use all PDF tools without limitation. Account creation is optional and only needed for features like saved signatures and workflows.

एनालिटिक्स

हम गोपनीयता-अनुकूल एनालिटिक्स (जैसे Cloudflare Web Analytics या Plausible) का उपयोग कर सकते हैं ताकि यह समझ सकें कि कितने लोग साइट पर आते हैं और कौन से पेज लोकप्रिय हैं। ये टूल कुकीज़ का उपयोग नहीं करते, आपको साइटों पर ट्रैक नहीं करते, और व्यक्तिगत रूप से पहचान योग्य जानकारी एकत्र नहीं करते।

कुकीज़

PDFlys कोई कुकी सेट नहीं करता। हम किसी भी प्रकार की ट्रैकिंग कुकीज़, विज्ञापन कुकीज़, या तृतीय-पक्ष कुकीज़ का उपयोग नहीं करते।

When you accept cookies, the following categories may be used:

• Analytics cookies — set by Google Analytics (GA4) to distinguish unique visitors and understand site usage.
• Advertising/conversion cookies — set by Google Ads to measure the effectiveness of our advertising campaigns and track conversion actions.

We do not use cross-site tracking cookies or any third-party cookies beyond the analytics and advertising services described above. No cookies are set without your explicit consent. For full details, see our Cookie Policy.

Lawful Basis for Processing

We process personal data under the following legal bases, in accordance with both the Saudi Personal Data Protection Law (PDPL) and the EU General Data Protection Regulation (GDPR):

• User authentication (name, email via Google Sign-In) — PDPL: Consent / Contractual necessity; GDPR: Contract performance (Art. 6(1)(b))
• Marketing emails (email address) — PDPL: Consent (opt-in); GDPR: Consent (Art. 6(1)(a))
• Google Analytics (IP, device, behavior) — PDPL: Consent (cookie banner); GDPR: Consent (Art. 6(1)(a))
• Google Ads tracking (conversion events) — PDPL: Consent (cookie banner); GDPR: Consent (Art. 6(1)(a))
• Plausible Analytics (anonymous page views) — PDPL: Legitimate interest (anonymous); GDPR: Legitimate interest (Art. 6(1)(f))
• Sentry error monitoring (error traces, device info) — PDPL: Legitimate interest; GDPR: Legitimate interest (Art. 6(1)(f))
• Cloudflare CDN/security (IP, request metadata) — PDPL: Legitimate interest (security); GDPR: Legitimate interest (Art. 6(1)(f))

How We Use Your Data

• To provide and maintain the Service (authentication, saving preferences)
• To send product updates and tips if you have opted in
• To understand how visitors use PDFlys and improve the Service (analytics)
• To measure the effectiveness of our advertising campaigns (conversion tracking)
• To detect and fix technical issues (error monitoring)
• To protect the Service from abuse and ensure security (CDN/DDoS protection)

Advertising & Conversion Tracking

With your consent, we use Google Ads conversion tracking to measure the performance of our advertising campaigns. When you interact with one of our ads and subsequently use a PDFlys tool, a conversion event may be recorded to help us understand which ads are effective.

Google Ads may set cookies and use device identifiers to attribute conversions. Third-party vendors, including Google, may use this information to show ads on sites across the internet based on your prior visits to PDFlys. No file data, document content, or personal documents are ever shared with any advertising service.

These advertising scripts are only loaded after you explicitly accept cookies via the consent banner. If you decline or have not yet responded to the consent prompt, no advertising cookies or scripts are loaded.

Sub-Processors & Third-Party Services

We use the following third-party service providers (sub-processors) to operate PDFlys. Each processes data in accordance with its own privacy policy and applicable data processing agreement:

None of these services have access to the PDF files you edit in PDFlys.

We will notify registered users via email if we add new sub-processors that process personal data.

International Data Transfers

PDFlys is based in the Kingdom of Saudi Arabia. Your personal data may be transferred to and processed in countries outside Saudi Arabia and the European Economic Area (EEA), including the United States, through our service providers.

Transfer Safeguards (PDPL): We ensure all cross-border transfers comply with the Saudi Personal Data Protection Law (PDPL) and do not conflict with the Kingdom's national interests. We use appropriate safeguards including Standard Contractual Clauses (SCCs) with all sub-processors.

Transfer Safeguards (GDPR): For transfers of EU/EEA personal data, our service providers maintain appropriate safeguards including the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs).

Data Retention

In accordance with the PDPL principle that personal data should not be retained longer than necessary for its purpose, we apply the following retention periods:

• PDF files: Not stored — processed in your browser only
• Account data (name, email): Until account deletion or 24 months of inactivity
• User preferences: Until account deletion or 24 months of inactivity
• Cookie consent records: 12 months (then re-consent required)
• Google Analytics data: 14 months (GA4 default)
• Sentry error data: 90 days
• Support/contact emails: 24 months after resolution

Your Data Protection Rights

Rights Under Saudi PDPL (All Users)

Under the Saudi Personal Data Protection Law (PDPL), you have the following rights:

• Right to Be Informed (Art. 8) — Know what data we collect, why, and who receives it
• Right of Access (Art. 10) — Request a copy of all personal data we hold about you
• Right to Rectification (Art. 10) — Correct inaccurate or incomplete personal data
• Right to Erasure (Art. 10) — Request deletion of your personal data
• Right to Data Portability (Art. 10) — Receive your data in a machine-readable format
• Right to Restrict Processing — Limit how we process your data in certain situations
• Right to Withdraw Consent (Art. 6) — Withdraw consent at any time without affecting prior processing

Additional Rights for EU/EEA Users (GDPR)

• Right to Object (Art. 21) — Object to processing based on legitimate interest
• Right Regarding Automated Decisions (Art. 22) — Not be subject to solely automated decision-making

Rights for California Residents (CCPA/CPRA)

California residents have the right to know what personal data we collect, request deletion, and opt out of the sale of personal data. PDFlys does not sell personal data.

Rights for Brazilian Users (LGPD)

Brazilian users have rights to access, correct, anonymize, delete, and port their personal data under the Lei Geral de Protecao de Dados.

To exercise any of these rights, contact us at privacy@pdflys.com. We will respond within 30 days (extendable by an additional 30 days for complex requests under PDPL, or 60 days under GDPR).

You can also exercise certain rights directly: use "Download My Data" in Settings for data portability, and "Delete Account" for erasure.

You have the right to lodge a complaint with the relevant supervisory authority:

• Saudi Arabia: Saudi Data & AI Authority (SDAIA) — sdaia.gov.sa
• European Union: Your national Data Protection Authority
• United Kingdom: Information Commissioner's Office (ICO)

Email Communications

If you create an account, you may opt in to receive product updates, tips, and feature announcements via email. This checkbox is unchecked by default at signup — we will never send you marketing emails unless you explicitly opt in.

You can change your email preference at any time from your Settings page or by emailing privacy@pdflys.com.

Your Choices & Opt-Out

You have full control over the data collected through PDFlys:

• Cookie consent: You can accept or decline cookies when you first visit PDFlys. If you decline, no analytics or advertising scripts are loaded and no cookies are set.
• Changing your cookie preference: You can change your cookie preference at any time from your Settings page, or by clearing site data for pdflys.com in your browser settings.
• Marketing emails: You can manage your email preferences from your Settings page or by emailing privacy@pdflys.com.
• Google Ads personalization: You can opt out of Google's use of cookies for ad personalization by visiting Google Ads Settings.
• General opt-out: You can opt out of third-party vendor cookies for advertising at aboutads.info or youronlinechoices.com.
• Browser controls: Most browsers allow you to block or delete cookies through their settings.

Because PDFlys processes all files locally in your browser, opting out of cookies does not affect any PDF editing functionality.

बच्चों की गोपनीयता

PDFlys जानबूझकर 13 वर्ष से कम उम्र के बच्चों से कोई जानकारी एकत्र नहीं करता। चूँकि हम कोई व्यक्तिगत डेटा एकत्र नहीं करते, इसलिए कोई आयु-विशिष्ट डेटा चिंता नहीं है।

इस नीति में परिवर्तन

हम समय-समय पर इस गोपनीयता नीति को अपडेट कर सकते हैं। परिवर्तन इस पेज पर अपडेट की गई "अंतिम अपडेट" तिथि के साथ पोस्ट किए जाएँगे। परिवर्तनों के बाद PDFlys का आपका निरंतर उपयोग संशोधित नीति की स्वीकृति माना जाएगा।

For non-material changes (e.g., formatting, clarifications), we will update this page with a new "Last Updated" date.

संपर्क

यदि आपके पास इस गोपनीयता नीति के बारे में कोई प्रश्न हैं, तो आप हमसे {privacyEmail} पर संपर्क कर सकते हैं। सामान्य पूछताछ के लिए, हमसे {generalEmail} पर संपर्क करें।

• Privacy inquiries: privacy@pdflys.com
• General inquiries: hello@pdflys.com
• Security inquiries: security@pdflys.com

If you are not satisfied with our response, you may lodge a complaint with:

• Saudi Arabia: Saudi Data & AI Authority (SDAIA) — sdaia.gov.sa
• European Union: Your national Data Protection Authority