1. Information We Collect
We collect only the personal data needed to provide and secure the Service:
- Email address and hashed password (account, login, email verification)
- Optional profile details you add in Settings: display name and profile photo
- Optional billing details you add in Settings: name, company, address, country and tax ID
- Credit balance, daily credit usage and transaction history (purchases and usage)
- Subscription details: your plan, billing interval (monthly or yearly) and the date your current period ends
- Payment records from our payment provider (order or subscription ID, product, amount, refund or cancellation status, and the email used at checkout)
- API keys you create (we store only a one-way hash, the key name and when it was last used)
- Verification stamps you create: the stamp code, the SHA-256 fingerprint of the stamped file, its file name, page count and date. The file itself is never stored. Anyone holding a copy can check it against this record; the check is done in their browser and only the fingerprint is sent to us.
- Support tickets and messages you send us
- Basic request data such as IP address, used for rate limiting and abuse prevention
We do not collect payment card details. Payments are handled by our payment provider; we only receive confirmation of a successful payment, what was bought (a plan or a credit pack) and its status.
2. How We Use Your Information
- Running your account and the PDF tools
- Tracking your credit balance, daily credits and subscription status
- Processing payments through our payment provider (we share your email address and an internal user ID so the payment is linked to your account, and, if you saved them, your billing details so checkout is pre-filled)
- Checking that every payment, renewal and refund matches the credits and plan on your account
- Answering support requests
- Showing your name and photo to you in the app (they are not public)
- Preventing abuse, fraud, and violations of our Terms of Use
We do not sell or rent your personal data and do not use it for advertising.
3. Your Files
Files you upload are processed in server memory and sent straight back to you in the same request. They are never written to disk or kept afterwards, and we never use them for any other purpose (including AI training).
Tracked Share is the exception. When you share a document with Tracked Share, we store the PDF encrypted so that each recipient can download a personalised copy. It is deleted when you stop sharing or when the share expires (after 7, 30 or 90 days, as you choose). For each copy we keep a tracking code, the recipient's email and optional name, and the time, so the sender can trace leaked copies. Recipients are told this before they receive a copy, and their details are shown only to the sender.
Your profile photo is different: if you upload one, we store a small resized copy (256×256) with your account so it can be shown to you. You can remove it at any time in Settings, and it is deleted together with your account.
4. Sharing of Information
- Payment provider — processes payments and subscriptions (as merchant of record where shown at checkout). Receives your email address, internal user ID and any billing details you saved; never receives your files or profile photo.
- Hosting, network and email providers — including Cloudflare, which delivers and protects the website, to run the Service and send verification and support emails.
We may disclose information if required by law or to protect our users and the Service.
5. Cookies
We use a necessary cookie to keep you signed in and to remember your cookie choice. We do not use advertising or third-party analytics cookies.
6. Data Retention
Account, credit, subscription and support records are kept while your account is active. When you ask us to delete your account we remove or anonymize your data within a reasonable time, except records we must keep for tax, fraud prevention, or disputes.
7. Security
We use HTTPS, hashed passwords, email verification, and rate limiting. No service is perfectly secure, but we work to protect your information.
8. Your Rights
You can ask to access, correct, export, or delete your personal data at any time in Settings (profile and billing details), or by submitting a support ticket or emailing support@docutools.net.
9. Changes to This Policy
We may update this policy and will change the date at the top when we do.