Privacy policy

Your email address. Provided by Google or Microsoft when you choose their sign-in option, or entered by you when you sign in with an emailed code.

Google sign-in details. If you choose Google sign-in, Supabase records the email address, name, profile-picture URLs and a persistent Google account identifier supplied by Google, together with provider and verification metadata needed to operate sign-in. Google does not share your Google password with PDFGrid.

Microsoft sign-in details. If you choose Microsoft sign-in, Supabase records the email address, name, persistent Microsoft account identifier, Microsoft issuer and tenant identifiers, and provider and verification metadata supplied by Microsoft, needed to operate sign-in. Microsoft does not share your Microsoft password with PDFGrid.

Your templates. Their names, fields, rules, phrase anchors, regions and granularity settings. A template contains what you enter into it, so do not put document content in a template unless you want that content stored with it.

Terms acceptance. If you create an account, I store the time you accepted the Terms of use and the version accepted.

Email updates and feedback. If you choose separately to receive them, I store your choice, the time you made it, and the version of the wording shown to you. I may send occasional PDFGrid updates and ask what would make the service more useful. This is optional and is not required to create or use an account. You can withdraw at any time in account settings or by using the unsubscribe link in an updates email. Withdrawing stops future updates immediately.

Correspondence. When you use the contact form, I store your email address, message, a salted hash of your IP address, user agent, delivery timestamp and any delivery error. The salted IP hash is pseudonymised, not anonymous, and remains personal data. I use it only to rate-limit abuse and secure the form.

Technical records created automatically. Hosting and database providers process ordinary server information such as IP addresses, timestamps and request paths for security and reliability. I do not use these for analytics or build profiles from them.

Your documents. PDFs are opened and processed entirely inside your browser, using a PDF engine compiled to WebAssembly. They are not transmitted anywhere.

The values you extract. Extraction happens on your device. Results stay there until you export them yourself.

Page scans and extracted text. These exist only in your browser's memory and are discarded when you close the tab.

You can verify this in your browser's network panel: running an extraction does not transmit the document or the values extracted from it. There is a demonstration of this on the home page.

To provide the service you asked for — UK GDPR Article 6(1)(b), performance of a contract. Your email address identifies your account. Your templates are stored so you can use them again.

To keep the service secure and working — Article 6(1)(f), legitimate interests. This covers the automatic technical records described above. My interest is in preventing abuse and diagnosing faults; the impact on you is minimal, and you can object at any time.

To respond to correspondence — Article 6(1)(f), legitimate interests. This covers contact-form messages, the associated email address and the pseudonymised IP hash used to prevent abuse.

I rely on your consent only if you choose to receive occasional PDFGrid updates and feedback requests. I do not use consent for profiling or advertising.

Supabase — database and authentication. Account records, templates, terms-acceptance records and contact-form records are stored in the project's EU West (Ireland, `eu-west-1`) region.

Resend — delivery of email on my behalf: sign-in codes, contact-form messages, and optional PDFGrid updates. It processes the relevant sender and recipient email addresses, message content and delivery metadata for each. Optional updates are sent only if you have chosen to receive them.

Cloudflare — hosting, DNS and content delivery. It processes visitor IP addresses and request information to serve and secure the site.

Google and Microsoft — only if you choose to sign in with one of them. In that case the provider you chose processes your sign-in as a separate controller under its own privacy policy and passes PDFGrid the details listed above. Google also receives a copy of a contact-form message when it is delivered to the Google-hosted support mailbox.

The primary Supabase database is in Ireland. Supabase's Data Processing Addendum incorporates the UK Addendum to the EU Standard Contractual Clauses where UK data-protection law applies to a restricted transfer.

Resend's primary processing operations are in the United States. Its Data Processing Addendum says that its UK extension to the EU-US Data Privacy Framework and UK Standard Contractual Clauses apply to relevant UK transfers.

Cloudflare operates a global network. Its Data Processing Addendum provides for the EU Standard Contractual Clauses as amended by the UK Addendum for relevant UK restricted transfers, and also describes its Data Privacy Framework position.

Google and Microsoft each act as a separate controller for their own sign-in. Google is also a separate controller for the Google-hosted support mailbox. Their processing, including any international transfers, is governed by their own privacy terms rather than a PDFGrid processor instruction.

For the current terms of each provider, see Supabase's Data Processing Addendum, Resend's Data Processing Addendum, Cloudflare's Data Processing Addendum and Google's privacy policy, and Microsoft's privacy statement.

Your account and templates — until you delete them from within the app, which happens immediately, or until you ask me by email to delete your account. I will action an email deletion request within 30 days.

Inactive accounts — I may delete an account unused for 24 months and its templates.

Contact-form records — kept in the PDFGrid database for 12 months, then deleted by a daily database job. The email copy delivered to the support mailbox is a separate store and is retained until manually deleted there; it is not deleted by the 12-month database job.

Delivery-provider records — Resend may retain contact-form delivery data under its own service terms. That retention is separate from, and not controlled by, the PDFGrid database job.

Email-updates preference — kept until you delete your account. If you withdraw, I retain the withdrawal timestamp with your account record so I can honour it and demonstrate that I did so.

Technical records — retained by Supabase and Cloudflare under their own provider retention settings. I do not state a fixed period because it is not a PDFGrid-controlled setting.

A sign-in session, held in your browser's local storage so you stay signed in between visits.

Templates you are working on, held in your browser so you do not lose work by refreshing. Signed-in drafts are held in local storage. Anonymous drafts are held in session storage for the current tab and disappear when you close it.

Your theme preference, held in local storage as `pdfgrid-theme`.

Your share-prompt preferences, held in local storage — a count of how many exports you have made, used to decide when the prompt appears, and whether you have asked not to see it again.

The landing-page privacy measurement state, held in session storage while you use that demonstration.

Nothing stored in browser storage is used for analytics, tracking or advertising. Clearing browser storage removes these local items.

Under UK data protection law you have the right to:

• ask what I hold about you, and get a copy
• have inaccurate information corrected
• have your information deleted
• restrict or object to how I use it
• receive your data in a portable format

Email support@pdfgrid.app and I will respond within one month. There is no charge.

Because your templates are yours, you can delete individual templates, or your account and every saved template, yourself at any time from within the app. If you cannot sign in, email support@pdfgrid.app to request deletion.

If you think I have handled your information badly, please tell me first — I would rather fix it.

You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator:

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF ico.org.uk/make-a-complaint 0303 123 1113

PDFGrid is a tool for work and is not directed at children. I do not knowingly collect information from anyone under 18.

If I change this policy, I will post the revised version here and update its effective date. Older versions are available on request.

Email: support@pdfgrid.app

ICO registration number: ZC228661

For legal provider information, see the imprint.