Privacy Policy
Last updated: 8 August 2026 · Effective for all use of the service
PDFRetype ("the Service", "we", "us") is a free, account-less document conversion service operated from India by Vaibhav Srivastava, sole proprietor, Ranchi, Jharkhand, India. This policy is written to comply with India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, and with the Information Technology Act, 2000 and rules made under it. It is also written to be read: what we store, why, for how long, and what we never do.
The Service is built around one idea: your documents are yours. We are the "data fiduciary" for the little personal data the Service touches — and by design, that is almost nothing.
Itemized notice — what we process, and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| The documents you upload, text extracted from them, and files converted from them | Performing the conversion you asked for — the Service's only function | Consent, given by uploading (DPDP s.6) | Deleted permanently within 24 hours |
| A random workspace ID generated by your browser/app | Grouping your documents so only your device can see them | Legitimate operation of the Service you request | Until you clear your browser/app data |
| Short-lived technical logs: request path, status, timing, an IP-derived rate-limit counter | Abuse prevention, debugging, keeping the free Service available | Legitimate operation; security | Rotated automatically (days, not months) |
| Optional, only with your explicit consent: pseudonymous analytics events (Google Analytics 4) | Understanding which tools help most | Consent via the banner — declining changes nothing | Per Google Analytics retention; withdraw any time |
| When advertising is active and only with your consent: advertising cookies (Google AdSense) | Funding the free Service | Consent via the banner | Per Google's ad policies; withdraw any time |
What we never collect
- No accounts, names, email addresses, phone numbers, or government identifiers.
- No advertising identifiers or cross-site tracking without consent; no fingerprinting.
- Analytics and advertising never see your documents, file names, or file contents — events carry tool names and formats only.
- We never sell personal data, and never use your documents for anything other than the conversion you requested — including never using them to train AI models.
Automatic deletion — 24 hours
Everything you upload, and everything produced from it, is permanently deleted within 24 hours — originals, extracted text, converted files. No backups of user documents are kept. This exceeds the DPDP requirement to erase personal data once its purpose is served: the purpose (your conversion) is served the moment you download your file, and deletion follows automatically without you asking. You can also delete any document immediately from the app; deletion is permanent either way.
Your rights (Data Principal rights under the DPDP Act)
Because the Service has no accounts, the honest answers are unusually short:
- Access / correction: we hold no profile about you to access or correct. Your documents are visible only inside your own workspace, on your own device.
- Erasure: automatic within 24 hours; immediate via the delete button; clearing your browser/app data orphans the workspace and the cleanup removes it permanently.
- Consent withdrawal: decline or withdraw analytics/ads consent at any time by clearing this site's data — the banner will ask again, and "no" is a complete answer.
- Grievance: see the Grievance Officer section below; unresolved complaints may be escalated to the Data Protection Board of India.
- Nomination: with no account and 24-hour deletion, there is nothing durable to nominate a representative for.
Children
The Service is not directed at children and has no accounts, age fields, or profiling of any kind. We do not knowingly process children's personal data. Parents or guardians who believe a child has uploaded sensitive material may use the immediate-delete function or contact the Grievance Officer.
Security
Documents are processed in isolated per-client workspaces (cross-workspace access is denied and verified by automated tests on every deployment), transmitted over HTTPS, protected by rate limits and abuse controls, and stored only until the 24-hour purge. Server logs contain document IDs — never document contents or file names.
Data breach
In the event of a personal data breach we will notify the Data Protection Board of India and affected users as required by the DPDP Rules (including the 72-hour intimation to affected Data Principals), with a plain-language description of what happened, what data was involved, and what protective steps you can take. Given the 24-hour deletion window, the population of affected data at any moment is deliberately small.
Where processing happens
Conversion runs on our own servers; documents are never sent to third-party AI or OCR services. Our servers may be located outside India; regardless of location, the promises in this policy — 24-hour deletion, workspace isolation, no third-party processing of your documents — apply in full.
Visitors from the EEA/UK
If you visit from the European Economic Area or the UK: the Service operates on the same basis for you. Analytics and advertising load only after opt-in consent (denied-by-default consent signals per Google Consent Mode v2); processing of uploaded documents is performance of the service you request; and the deletion and access rights described above apply to you identically. For GDPR purposes the operator identified below is the data controller.
Grievance Officer (IT Rules, 2021 & DPDP Act)
Complaints and data-protection requests go to our Grievance Officer:
- Name: Vaibhav Srivastava
- Email: support@pdfretype.com (subject line "Grievance")
We will acknowledge your complaint within 24 hours and resolve it within 15 days, as required by the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. If you are not satisfied with the resolution, you may approach the Data Protection Board of India.
Changes to this policy
We will post changes here with an updated date. Material changes that affect what we collect or how long we keep it will be announced on the site before they take effect.
Contact
Operator: Vaibhav Srivastava, sole proprietor, Ranchi, Jharkhand, India. Questions and grievances: support@pdfretype.com