PDF in one click privacy policy

1. Data controller

The controller of the data collected on PDF in one click is CODINGPOESY S.L. (NIF B16857880), Calle Roger de Llúria, 118, 08037 Barcelona, Spain.

For any question about your data or to exercise your rights: [email protected].

2. Your PDFs and photos are never sent

A file dropped on this site is not sent to a server. It is read, processed and written by the browser. PDF in one click receives none of it, keeps no copy and therefore can neither read it nor share it with anyone. The same applies to a photo: it is converted to PDF by the browser.

Single exception: a Word, Excel, PowerPoint, OpenDocument, RTF or text document cannot be converted to PDF by the browser. It is then sent, encrypted, to our server, which converts it to PDF and sends it straight back. The customer is told on screen during the conversion. The converter has no internet access, does not record the file name, and deletes the document and the produced PDF as soon as the conversion ends: no copy is kept, read or shared. Macros in the document are not run, and macro formats (.docm, .xlsm, .pptm) are refused.

Work in progress, meaning the dropped file and what the customer added, is stored locally in the browser storage (IndexedDB) so that the customer finds the document again after a payment, a closed tab or a reload. This data does not leave the device. The customer can erase it at any time with the "Erase my document" button in the workspace, or by clearing the site data in the browser.

The only data sent to PDF in one click is the order data: email address, name of the tool used, amount, and the payment information processed by Stripe. The customer's file name is not sent.

3. Data collected and purposes

For an order: email address, tool used, amount, country and payment references. Card details are collected and processed directly by Stripe; we do not keep them.

For audience measurement and advertising, and only with your consent: pages viewed, steps of the journey, campaign parameters (gclid, UTM), device type and IP address.

This data is used to perform the order and the subscription, answer customer service requests, prevent fraud, meet our legal obligations and measure the performance of our ads.

4. Legal bases

Performance of the contract (Article 6(1)(b) GDPR) for the order and the subscription; legal obligation (Article 6(1)(c)) for invoicing and accounting; legitimate interest (Article 6(1)(f)) for fraud prevention; consent (Article 6(1)(a)) for audience measurement and advertising, which you can withdraw at any time.

5. Retention

Files produced on the server side, when there are any, are deleted no later than 30 days after the service is performed.

Order and invoicing data is kept for six years, as required by Article 30 of the Spanish Commercial Code.

Audience measurement data is kept for no more than fourteen months.

6. Recipients

CODINGPOESY S.L. uses the following processors, which only access the data they need for their task:

Stripe Payments Europe, Ltd.: payment processing and fraud prevention (Ireland, European Union).

Resend: sending transactional emails (European Union).

OVH SAS: application hosting, order storage and technical logs (France, European Union).

PostHog EU: audience measurement and conversion funnels (European Union).

Cloudflare, Inc.: website delivery, attack protection and email routing (global network).

Only with your consent: Google Ireland Limited (Google Tag Manager, Google Analytics, Google Ads) for measurement and advertising, and Contentsquare SAS for anonymised browsing analysis, excluding document areas.

Google and Cloudflare may transfer data outside the European Economic Area under the EU-US Data Privacy Framework or standard contractual clauses.

7. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability (Articles 15 to 22 GDPR), and the right to withdraw your consent at any time.

To exercise them, write to [email protected]. We answer within one month.

You can lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es) or with the data protection authority of your country of residence.

8. Cookies and consent

Cookies needed for the website to work are set without consent. Measurement and advertising cookies are only set after you agree in the consent banner.

You can change or withdraw your choice at any time from the cookie link in the footer.