Privacy Policy

Effective Date: September 2, 2026

Controller: Job Done Marketing LLC

Contact: sales@eupdf.com

1. Overview

euPDF.com ("we", "us", "our") provides online PDF processing services. We are committed to protecting your personal data and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Data We Collect

Uploaded documents – the files you submit for conversion or processing (may contain personal data).
Technical data – IP address, browser type, device information, timestamps.
Session identifiers – random UUIDs and tokens used to associate you with your uploaded files and credit balance.
Payment transaction data – payment confirmation identifiers, but not full card numbers or CVV (handled by Stripe and Airwallex).
Email address – only if you contact us via email (e.g., sales inquiries).

3. Purposes and Legal Bases

Purpose	Legal Basis
Providing PDF processing services (conversion, merge, OCR, etc.)	Performance of a contract (or steps prior to entering a contract)
Maintaining session and credit balance	Performance of a contract
Ensuring network and information security	Legitimate interests
Fraud prevention and abuse detection	Legitimate interests
Compliance with legal obligations (e.g., tax, law enforcement)	Legal obligation

4. Data Retention

Uploaded documents and temporary processed outputs are automatically deleted after:
- Your session ends (you click "Exit" or close the browser), or
- 15 minutes of inactivity.
Server logs (including IP addresses) are retained for a maximum of 7 days and then permanently deleted.
Session identifiers and credit balances are kept for up to 30 days after last activity, after which they expire automatically.
Payment records are retained as required by law and payment provider agreements.

5. Data Sharing and Sub‑Processors

We may share personal data with the following categories of recipients:

Recipient	Purpose	Location
Stripe, Inc.	Payment processing	USA (EU‑US Data Privacy Framework)
Airwallex	Payment processing	Global
Webdock (hosting provider)	Server infrastructure	EU (Denmark)
Docker containers	Isolated processing environments	Same server

All sub‑processors are bound by data processing agreements and appropriate safeguards.

6. International Transfers

Where personal data is transferred outside the European Economic Area (EEA), we rely on:

Adequacy decisions (e.g., EU‑US Data Privacy Framework for Stripe),
Standard Contractual Clauses (SCCs), or
Other valid transfer mechanisms under GDPR.

7. Data Subject Rights

Under GDPR, you have the right to:

Access your personal data.
Rectify inaccurate data.
Erase your data ("right to be forgotten").
Restrict processing.
Data portability.
Object to processing based on legitimate interests.
Withdraw consent (where applicable).

To exercise any of these rights, contact us at sales@eupdf.com. We will respond within one month.

8. Security Measures

Isolated Docker containers for each processing task.
Encryption in transit (TLS 1.3).
Automatic deletion of uploaded files.
Strict access controls and monitoring.
No permanent storage of documents.

9. Cookies

Our platform does not use first‑party cookies. Third‑party payment providers (Stripe, Airwallex) may set their own cookies when you interact with their payment pages. Those cookies are governed by their respective privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.

11. Contact

For any privacy‑related questions or complaints, contact:
Job Done Marketing LLC
Email: sales@eupdf.com
You also have the right to lodge a complaint with your local data protection authority.