Overview: Review the complete GDPR compliance framework, client-side zero-upload privacy architecture, and data protection standards for PDFTeq users.
GDPR & Privacy Policy
Transparency, Control, and Security. Detailed protocols on how we handle data.
Last Updated: 30 Oct 2026
1. Data Controller Information
PDFTEQ is the data controller responsible for processing personal data under this policy.
- Website: https://pdfteq.com
- Email: support@pdfteq.com
2. Personal Data We Collect
We adhere to the principle of data minimization. We only collect:
- Contact Data: Name and email address (only if you contact support).
- Technical Data: IP address, browser type, and device information (Server Logs).
- Temporary Files: Uploaded files are processed in browser memory (RAM) or ephemerally on our secure servers, and are not persistently stored.
- Cookies: Session cookies for functionality and analytical cookies for traffic monitoring.
3. Legal Basis for Processing
- User Consent: For cookies and voluntary communication.
- Contractual Necessity: To provide the PDF processing service you requested.
- Legitimate Interests: To ensure network security, prevent fraud, and improve system performance.
4. How We Use Your Data
- To execute PDF operations (Merge, Split, Convert) requested by you.
- To respond to your support inquiries.
- To monitor platform stability and prevent DDoS attacks.
- To comply with legal obligations.
5. File Handling Architecture
Hybrid Privacy Guarantee
Our "Sigma-Engine" uses WebAssembly for local processing (Zero Uploads) for most tools. When server processing is required for format conversions, we enforce a strict Zero Retention Protocol. Files are permanently wiped from our hosted servers immediately after processing, ensuring your PII (Personally Identifiable Information) is never stored.
6. Cookies & Telemetry Policy
We use HTML5 LocalStorage and essential cookies for tool state, anonymized Google Analytics 4 (G-DY3WEGGFM4) cookies to measure aggregate traffic and performance, and Google AdSense (ca-pub-3853491600005177) cookies to display advertisements that keep our platform free. We never track or log the contents of your PDF documents or calculator inputs.
You may disable cookies via your browser settings or opt out of personalized AdSense ads via Google Ad Settings at any time, as detailed in our Cookie Policy.
7. Your Rights Under GDPR
As an EU resident (and by extension to all our users), you have the right to:
- Access: Request a copy of data we hold about you.
- Rectification: Correct inaccurate data.
- Erasure: Request deletion of your data ("Right to be Forgotten").
- Restriction: Limit how we process your data.
- Portability: Receive your data in a structured format.
- Objection: Object to processing based on legitimate interests.
To exercise these rights, email: support@pdfteq.com
8. Data Security Measures
- Encryption: All data in transit is encrypted via TLS/SSL (HTTPS).
- Access Control: Strict internal access controls for server logs.
- Ephemeral Processing: Files are cleared from memory or permanently wiped from servers immediately after processing.
9. Third-Party Processors
Across 19 of our 22 PDF tools and all 20 financial calculators, processing occurs 100% locally in your browser with zero third-party data transfer. Where external services are used, we partner only with GDPR-compliant processors under strict data-processing terms:
- CloudConvert (Word to PDF Tool Only): Processes uploaded
.docx/.docfiles ephemerally over HTTPS solely to return the converted PDF. - Google Ireland Limited / Google LLC: Provides anonymized Google Analytics 4 (
G-DY3WEGGFM4) traffic telemetry and Google AdSense (ca-pub-3853491600005177) ad serving. - Cloudflare & Hosting Infrastructure: Provides TLS 1.3 encryption, WAF/DDoS protection, and isolated server execution for
Compress PDFandPDF to PDF/A.
10. Data Retention Periods
- Temporary Files: Cleared instantly upon page close or automatically purged from servers within 30 minutes.
- Support Emails: Retained for up to 12 months for context.
- Server Logs: Retained for 90 days for security auditing.
GDPR Compliance Checklist
Operational verification for Data Controllers