Privacy Policy

1. Who we are

pdflab360PDFLab360 (“we”, “us”) provides the website pdflab360.com and the pdflab360PDFLab360 apps. For privacy questions, write to [email protected].

2. Your documents

Tools that run on your device

Most tools (including merge, split, compress, edit, sign, redact, OCR, compare and PDF to Word) process your files inside your browser or app. These files are not sent to us and we never see them.

Tools that use our server

Converting Word, Excel, PowerPoint and similar files to PDF requires our server. The file is sent over an encrypted connection, converted automatically without any person viewing it, and deleted: the original right after conversion, the result as soon as you download it, and in any case within 1 hour. You can turn these tools off entirely with Private Mode.

Share links

If you create a share link, the file is encrypted on your device before upload, and the decryption key exists only in the link you share. We store only encrypted data we cannot read. Links are deleted when they expire (1 hour, 24 hours or 7 days, your choice), after 20 downloads, or when you delete them.

3. Information we collect

• Technical request data, such as IP address, browser type and time of request, which our servers and our network provider (Cloudflare) process to deliver the service, prevent abuse (for example rate limiting) and keep it secure. We don't log file names or file contents.
• Messages you send us by email, which we use only to reply.
• Settings stored on your device, such as light/dark mode and Private Mode, kept in your browser's local storage. They are not sent to us.

We do not use advertising, tracking cookies or third-party analytics, and we do not sell personal data.

4. Cloud storage pickers

If you choose a file from Google Drive, Dropbox or OneDrive, you sign in with that provider and the file is downloaded straight from them into your browser. We only request access to the files you pick. Those providers' own privacy policies apply to that sign-in.

5. Service providers

• Cloudflare: network delivery and security for our website.
• Oracle Cloud Infrastructure: hosting of our servers in India (Mumbai region).
• jsDelivr: delivery of OCR language files to your browser (no document data is sent).

6. How long we keep data

• Files for server conversion: deleted within 1 hour at most, usually immediately.
• Encrypted share links: until they expire, are used 20 times, or you delete them.
• Server logs: kept only as long as needed for security and troubleshooting.
• Emails: as long as needed to handle your request.

7. Your rights

Under the Digital Personal Data Protection Act, 2023 and other applicable laws, you may ask to access, correct or erase personal data we hold about you, withdraw consent, and nominate someone to exercise these rights on your behalf. Write to [email protected]. If you're not satisfied, you can contact our Grievance Officer.

8. Children

pdflab360PDFLab360 is not directed at children under 18. We do not knowingly collect personal data from children.

9. Changes

If we change this policy, we'll update the date at the top and, for important changes, show a notice on the website.