Privacy Policy

Abdulhadi Nur Iyow, trading as PDFCraft ("we"), is the data controller for personal data processed through this website. Contact: info@pdfcraft.ie.

Your documents

All PDF tools run inside your browser. The files you process are never uploaded to us. The only exception is when you are signed in and choose "Save to my files" — that file is stored privately in your account until you delete it.

What we collect

• Account data: email, display name, and profile picture if you sign in with Google.
• Activity history (signed-in users only): which tool you used, file names, file sizes and the time.
• Saved files: only the files you explicitly save.
• Administration records: account access status and a log of administrator changes, used to operate and secure the service. Authorized administrators can see account details, subscription records, usage totals and storage metadata, but this dashboard does not expose your PDF contents.

Why and legal basis

We process this data to provide your account, history and storage (performance of a contract, Art. 6(1)(b) GDPR) and to keep the service secure (legitimate interests, Art. 6(1)(f)).

Cookies and storage

We use only strictly necessary browser storage: to keep you signed in, remember your theme and remember that you've seen our notice. No analytics, tracking or advertising cookies.

Processors

Our hosting and database providers store account data on our behalf under data-processing agreements. If you use Google sign-in, Google processes your login under its own privacy policy. If you buy a plan, Paddle.com acts as our Merchant of Record and processes your payment, subscription, tax and invoicing data; we only receive your subscription status and plan. We may also share data with professional advisers, or with authorities where the law requires it.

Some providers may process data outside the EEA; where they do, transfers are protected by Standard Contractual Clauses or adequacy decisions.

Security

We use encryption in transit, access controls and per-user isolation of stored data.

Retention

We keep your data while your account exists. When you delete your account, your profile, history and saved files are erased immediately.

Operational administrator audit events remain after account erasure, with the erased account’s actor and target identifiers removed. Payment records held by Paddle are subject to its legal retention obligations.

Your rights

You have the right to access, correct, export, and erase your data, and to object or restrict processing. From your dashboard you can download all your data and delete your account at any time. For anything else, email info@pdfcraft.ie. You may also complain to your data-protection authority (in Ireland, the Data Protection Commission).

Children

Accounts are not intended for children under 16.