Privacy Policy

The short version: many ToPDF tools run entirely in your browser, so those files never reach us. When a tool does need our servers, we process your file and send it straight back without keeping a copy. We don't run ads, we don't use tracking cookies, and we don't sell data.

Your files

Browser tools (such as Merge, Split, Rotate, Organize, Watermark, Page numbers, JPG to PDF and PDF to JPG) do all their work on your device. Your files are never uploaded.

Server tools (Office to PDF, PDF to Word or Excel, Compress, Protect, Unlock and OCR) upload your file over an encrypted connection. It is processed, the result is returned in the same request, and any temporary working files are deleted as soon as the conversion finishes. We do not store your files, read them, or use them for any purpose other than producing your result.

Information we collect

• Account details. If you create an account: your email address, your name if you provide it, and a salted hash of your password. We never store the password itself.
• Usage counts. How many server conversions you have used today, so daily limits work. For visitors without an account this is tied to a one-way hash of the IP address rather than the address itself.
• Conversion history (Pro only). The file name, type of conversion, file sizes and time of each server conversion, so you can see your history. Never the file contents.
• Billing details. Payments are handled by Stripe. We receive your subscription status and a customer reference; we never see or store your card number.
• Messages. Anything you send through the contact form, so we can reply.
• Tool counts. Anonymous totals of how each tool is used, described under Cookies and tracking below. They can't be linked to you.
• Anonymous visit statistics. Which pages are viewed, the site that linked you here, and whether you're on a phone, tablet or computer, described under Cookies and tracking below.
• Server logs. Our hosting provider records standard request logs (such as IP address, time and the page requested) for security and troubleshooting. These are deleted automatically after about 30 days.

Cookies and tracking

We don't use advertising or analytics cookies. When you log in, a session token is saved in your browser's local storage so you stay signed in; it is removed when you log out.

We do count tool runs in aggregate, so we know which tools people rely on and which ones need fixing. When a tool finishes, we record which tool it was, whether it worked, how long it took and a rough file size bucket. That's all: no file names or contents, no account or device identifiers, no cookies, and no third-party analytics. Tools that run in your browser send this one small count to our own server; server tools are counted as part of the conversion itself. If your browser sends a Do Not Track signal, browser tools send nothing. The counts are kept for at most 400 days.

We also count page views the same way: which page, the site that linked you here (just its name, such as google.com) and whether the screen is phone, tablet or computer sized. To count unique visitors without cookies, our server makes a one-way code from your IP address, browser and a random value that is deleted at the end of each day, so the code can't identify you or connect your visits on different days. Your IP address itself is not saved. A Do Not Track signal turns this off too, and these counts are also kept for at most 400 days.

Who we share data with

Only the service providers needed to run ToPDF, and only what each one needs:

• Google Cloud, which hosts our servers and database.
• Stripe, which processes payments.
• An email delivery provider, for password resets and replies to your messages.

We do not sell personal data, and we do not share it for advertising.

How long we keep data

Account details are kept until you delete your account. Daily usage counts are only meaningful for one day. Anonymous tool and visit counts are kept for at most 400 days. Files are not kept at all.

Your rights

You can update your name and password in Settings, and delete your account there at any time, which permanently removes your account, usage and history. Depending on where you live, you may also have the right to request a copy of your data or ask us to correct it. Email support@topdf.work and we will help.

Children

ToPDF is not directed at children under 13, and we do not knowingly collect their personal information.

Changes

If we change this policy in a way that matters, we will update the date above and, for significant changes, notify account holders by email.

Contact

Questions about privacy? Email support@topdf.work or use the contact form.