Privacy Policy
Last updated: October 2026
1. Information we collect
When you use PDFtoAll, you may upload files (like PDFs) to our servers. These files are processed securely.
If you sign in with Continue with Google, Google shares your name, your email address, whether Google has verified that address, your profile photo and an account identifier. We keep the name, email address and identifier, and use them only to create your account, sign you in and recognise you next time; we do not keep the photo. We never receive your Google password, and we get no access to your Gmail, Drive, contacts or other Google data. You can remove PDFtoAll's access at any time from your Google Account (Security, then Third-party apps and services).
2. File Retention
We automatically delete uploaded and output files according to your plan: after 1 hour for guests, 24 hours for Free accounts and 7 days for Premium accounts. You can also manually delete files at any time.
3. We do not train AI
Your documents are yours. Uploaded files are used to process the task you request.
4. Payments
Card details are entered in a secure form hosted by our payment provider. PDFtoAll never receives or stores your card number; we keep only the payment reference and the status of your plan or credit purchase.
5. Deleting your data
You can delete any of your files at any time from your file list, and you can delete your whole account from Settings. Deleting the account removes your files, chat history and account details.
6. Analytics and advertising measurement
Our first-party Live View uses a random per-tab visit identifier in browser session storage to measure public page visits, traffic sources, device category and checkout activity. The identifier resets after 30 minutes of inactivity. We estimate city and country locally from the request IP address, but do not store the IP in Live View. Location may be inaccurate or unavailable. Visit snapshots are retained for up to 48 hours and removed during the next cleanup run (triggered by visitor activity, at most hourly). Signed-in visits can be associated with an account for checkout reporting. We do not collect form values, uploaded file names or contents, card details, or full URLs with query strings. Live View respects browser Do Not Track and Global Privacy Control signals. Payment records are retained separately for billing.
Our pages include Google Analytics, which tells us how many people visit, which pages and tools they use and where they came from, and measurement tags from the advertising platforms we use (OpenAI Ads, Google Ads and Meta for Facebook and Instagram). The advertising tags record that a visit, a tool use, a sign-up, a checkout or a purchase happened after one of our ads, so we can see which campaigns work. For purchases we also send Meta and OpenAI the order and a one-way hash of the account email from our server, so they can match the purchase to the ad without receiving the address itself. The Meta tag likewise sends a one-way hash of an email address you type into our sign-up or checkout forms, never the address itself. They never receive your files, their contents or your card details. Browser tracking-protection features and content blockers stop these tags without affecting the tools.