Privacy Policy

1. Data We Collect

We only ask for personal information when we truly need it to provide a service to you. The data we collect includes:

• Account Information: Email address used for authentication.
• Usage Metrics: Metadata regarding API requests (timestamps, status codes) for billing and analytics.
• Payment Information: Processed entirely by Stripe. We never store credit card data on our servers.

2. Data Storage & Security

Data is stored in highly secure AWS facilities (us-east-1). We use AES-256 encryption at rest and TLS 1.2+ for data in transit. Access to production databases is strictly limited via IAM least-privilege principles.

3. Third-Party Processors

We use trusted third-party services to operate PDFik.net. These include:

• Amazon Web Services (AWS): Hosting, compute, and database infrastructure.
• Stripe: Secure payment processing.
• Google Firebase: Secure authentication.

4. Data Retention

We adhere to strict data retention limits:

• Generated PDFs: Automatically deleted from our S3 buckets after 7 days (by default) or immediately if requested.
• Usage Events & Logs: Retained for 12 months for auditing and compliance.

5. Your Rights (GDPR)

You have the right to access, rectify, port, and erase your data. You can export your data or permanently delete your account at any time via the Account Dashboard.

6. Contact Us

For privacy-related inquiries, please contact us at privacy@pdfik.net.