Privacy Policy

1. Operator and contact

The service operator is NDK DIGITAL LLP, limited liability partnership, registered in England and Wales, company number OC460979. Registered office: Stoney Works, 8 Stoney Lane, London, United Kingdom, SE19 3BD.

Privacy, account and support requests can be sent to support@pdfnik.com. Do not attach a PDF, PDF password, page image or extracted text to a request.

2. Territorial availability

PDF Editor is not offered or intended for use by people located in the Russian Federation. The operator does not direct sales, advertising, payments or user support to the Russian Federation.

Registration with Russia selected as the country is unavailable. Country is declared manually: PDF Editor does not use IP geolocation to approve registration and cannot verify the citizenship of people mentioned inside an uploaded PDF.

The Russian-language interface is a translation for Russian-speaking users outside the Russian Federation. Selecting Russian changes language only and does not change eligibility or declared country.

3. Data we process

• Guest and account session identifiers, timestamps and security state.
• Original PDF, generated result, thumbnails, rendered pages, OCR text and temporary job files during an active session.
• Editor objects, annotations and form values required for the selected operation.
• For an account: email address, password hash, manually selected country and consent records.
• Technical information such as random IDs, file size and type, checksum, processor version, operation status, duration and safe error code.
• Security, deletion and privileged-access events that must not contain filename, document text, PDF password or signed download URL.
• Information the user voluntarily includes in a support email.

4. Data we do not intentionally collect

A user-controlled PDF may nevertheless contain personal, confidential or sensitive information. PDF Editor cannot determine citizenship or every legal category inside a document automatically.

• PDF content for advertising, profiling, resale or training AI models.
• PDF content, filename, OCR text, form values or signed URLs in product analytics.
• PDF files or generated results in long-term backups.
• Payment-card data while billing is disabled.
• Identity documents or biometric templates in the ordinary service flow.

5. Why we process data

• To validate, display, edit, convert, recognise, protect or otherwise process the PDF as requested.
• To maintain the active session, enforce free limits and provide a temporary download.
• To create and secure an account when the user chooses to register.
• To prevent abuse, investigate technical failures and prove deletion without retaining document content in audit records.
• To answer support, privacy and security requests.
• To collect optional, content-free usage analytics only after consent.

6. Working legal bases

The service uses performance of the requested service or contract for account and PDF operations, legitimate interests for narrowly limited security and abuse-prevention records, consent for optional analytics, and legal obligation only where a real applicable obligation requires processing.

This is the operator’s internally prepared compliance model, not an independent legal opinion. A purpose or provider change requires a new review before processing begins.

7. Sensitive and third-party data

The user must own the document or have sufficient authority to process it and any personal data it contains. The service is not intended for special-category data, criminal-offence data, children’s data, state secrets, professional secrets or documents for which temporary processing creates an unacceptable risk.

The operator does not manually review PDF content. Automated processing does not confirm that the upload is lawful or suitable for the user’s purpose.

8. Processing location

The website, API, workers, temporary storage and self-hosted Tesseract OCR run in the current PDFnik server contour in Germany, European Union. The operator is established in the United Kingdom.

External OCR, AI and commercial PDF services are disabled. A change of hosting region, document processor or remote-access model requires this Policy and the data-flow record to be updated.

9. Recipients and service providers

PDF Editor does not sell documents or personal data.

• The Germany-based hosting infrastructure used to run the service and temporary storage.
• Domain, DNS and TLS providers that handle network requests but are not instructed to inspect PDF content.
• The support email provider for messages voluntarily sent by the user.
• Telegram for allowlisted operational alerts that exclude document and account content.
• Google Analytics only after consent and only for content-free page and product events.
• Authorities only when a valid applicable legal requirement obliges disclosure.

10. Retention and deletion

Closing a browser tab is not a reliable deletion signal. Use “Delete now” when immediate revocation is required. Physically deleted session files cannot be restored for a privacy request or support investigation.

• Manual “Delete now” immediately revokes access to the document.
• An inactive session expires after 15 minutes.
• A session has a hard maximum lifetime of 2 hours from upload.
• After download preparation, a 15-minute grace period allows a retry.
• Physical deletion of original, result and related objects completes no later than 15 minutes after the deletion event.
• Job intermediates are removed after a terminal job state and never outlive their session.
• Content-free security audit metadata is kept for no more than 30 days.
• PDF content and generated results are excluded from long-term backup.

11. Cookies and analytics

Strictly necessary session and security storage is used to provide the requested service. Google Analytics loads only after an explicit choice. Advertising storage, Google Signals and advertising personalisation remain disabled. See the Cookie Notice for the current controls and retention.

12. Security

PDF Editor uses encrypted transport, random object identifiers, session ownership checks, isolated job scopes, restricted privileged access and content-free monitoring. Support access to PDF content is technically disabled.

PDF passwords use a short-lived one-time encrypted secret and are not written to the document database, job history or browser storage. No internet service can guarantee absolute security.

13. User choices and requests

Send a request to support@pdfnik.com. The operator may request proportionate account verification but will not ask for the PDF itself. See Support and complaints.

• Ask what account and support data is held about you.
• Correct inaccurate account data.
• Request account deletion and use “Delete now” for an active PDF session.
• Object to or ask to restrict processing where the applicable rules provide that right.
• Withdraw optional analytics consent without affecting PDF tools.
• Submit a privacy complaint to the operator and, where applicable, the competent supervisory authority.

14. Children

The service is intended only for users aged 18 or over. Do not create an account or upload a document on behalf of a child without lawful authority and an approved processing arrangement.

15. International context

The operator is in the United Kingdom and processing infrastructure is in Germany, European Union. Network, support or administration may therefore involve the UK and EU. The service does not claim that this internal Policy resolves every law of every country; availability is limited by the Terms and selected-country policy.

16. Changes to this Policy

The effective date and version appear at the top. Material changes to purpose, provider, region or retention are reviewed before deployment and published with an updated date. Contact support@pdfnik.com with questions.