Legal
Privacy Policy
Last updated: 16 August 2026
1. Data controller
The data controller is the self-employed holder of the PDFWORK trade name. Contact email: support@pdfwork.app (“PDFWORK”, “we”). Full name, tax ID and address are in the identification box on this page and are shown on request, to meet LSSI and GDPR identification duties without publishing them as indexable plaintext.
This policy explains how we process personal data when you use pdfwork.app and related services (web tools, Pro Online access and, optionally, the desktop app).
2. Data we collect
Technical browsing data: IP address, browser type, pages visited and timestamps, needed for security and site operation.
Cookies and similar technologies: according to your consent (see the Cookie Policy). We may store consent preferences and, where applicable, a Pro access identifier.
Purchase data: if you buy Pro Online (or, optionally, a desktop licence), payment is processed by Stripe. We receive payment confirmation and data needed to deliver access or the licence (e.g. email). Card details are handled by Stripe; we do not store full card numbers.
PDF file contents: web tools process files in your browser. We do not upload or store those PDF contents on our servers for those features.
3. Legal bases (GDPR Art. 6)
Contract (Art. 6(1)(b)): delivering purchased services (e.g. Pro Online access) and related support.
Legitimate interests (Art. 6(1)(f)): site security, abuse prevention and essential technical improvement, balanced against your rights.
Consent (Art. 6(1)(a)): non-essential cookies (analytics/marketing) and optional communications, when offered.
Legal obligation (Art. 6(1)(c)): where law requires retention (e.g. invoicing).
4. Purposes and retention
Site operation and security: as long as needed for those purposes and within applicable legal limits.
Cookie consent: up to 12 months or until withdrawn.
Purchase and licence data: for the contractual relationship and Spanish/EU tax and commercial retention periods.
Technical logs: limited retention, typically no more than 12 months unless investigating an incident.
5. Recipients and processors
We may use processors (hosting, Stripe for payments) under appropriate safeguards and contracts where required.
We do not sell your personal data.
6. Your rights
Under the GDPR you may request: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where processing is consent-based.
You may also lodge a complaint with the Spanish AEPD or another competent supervisory authority.
7. How to exercise your rights
Email support@pdfwork.app with your identity and the right you wish to exercise. We will respond within the legal timeframe (usually one month).
8. International transfers
If a provider processes data outside the EEA, we apply appropriate safeguards (e.g. EU Standard Contractual Clauses).