Privacy Policy
What we collect, why we collect it, how long it stays, and what
you can ask us to do about it.
In brief
- You can use every tool without an account.
- Files are processed on our server and deleted automatically 30 minutes after they are created.
- We do not sell personal data, show ads or use advertising trackers.
- We keep simple usage records (tool, file name, size, IP address) to run and protect the service.
- You can ask to see, correct or delete your data at [email protected], and you can delete your account yourself.
Who runs the site
Ezorxpdf (www.ezorxpdf.com) is operated by an individual developer, not a registered company. That individual decides how the personal data described below is used. For any privacy question, write to [email protected].
Your files
- A file you use with a tool is uploaded over HTTPS to our server and processed there. Nothing is processed only in your browser.
- Uploads, results and PDF Editor sessions are deleted automatically 30 minutes after they were created or last used. A job checks once a minute, and when the server disk is nearly full files can be removed earlier.
- We do not keep permanent copies, we do not share your files, and we do not use them to train AI models. OCR and the PDF Summarizer run on our own server, so your content is not sent to outside AI services.
- The site operator can open an uploaded file from the admin panel while it is still stored, for example to look into an error or a report of abuse. When the file has been deleted, nobody can open it.
Only upload files you are allowed to share, and think twice before sending highly sensitive documents to any online service, including this one.
Other data we collect
What you give us
- Account: your email address and a password, which we store only as a salted hash. A username is generated from your email. You may add your first and last name in Settings.
- Contact form: your name, email address, subject, message and any screenshots you attach. Each message is saved as a support ticket.
- Preferences: the email notification choices you make in your dashboard.
What is recorded automatically
- Usage records, written each time a tool finishes successfully: tool name, file name, file size, processing time, date and time, your IP address, and your user ID if you are signed in. This happens for visitors without an account too, in which case no user ID is stored.
- Upload records that link a stored file to the tool used, your IP address and, if signed in, your user ID. They disappear once the file is deleted.
- Server logs: the page requested, IP address, browser and device type, and error details.
We never ask for your phone number, postal address or date of birth.
Why we use it
- To run the tools and hand you your results.
- To create and protect your account, send verification and password-reset emails, and answer your messages.
- To find and fix faults, and to see which tools people use so we can improve them.
- To block abuse, fraud and attacks, and to apply rate limits.
- To meet legal obligations.
If you are in the European Economic Area or the UK, we rely on these legal bases: providing the service you asked for (contract), our legitimate interest in running and securing the service, your consent when you sign up or write to us, and legal obligation.
Who else is involved
We do not sell personal data and we do not give it to advertisers or data brokers. A few outside services help us run the site:
- Hosting provider: runs the servers that hold the application, the database and uploaded files.
- Email service (SMTP): delivers verification emails, password-reset emails and the messages sent from the Contact page.
- Google Fonts: the dashboard and the PDF Editor load their typefaces from Google Fonts, so your browser contacts Google when you open them. All other pages use fonts served from our own site.
- Stripe: would handle card payments if paid plans were switched on. They are not active, so no payments are taken.
We may also disclose information when the law requires it, or to protect the service and its users from abuse.
Cookies and tracking
- The site sets one small session cookie. It keeps you signed in, carries the security token that protects forms from forgery, and is needed for the site to work. A session lasts up to one day.
- We use no advertising cookies and show no ads at the moment.
- We use no third-party analytics at the moment. If that changes, this page will be updated first.
You can block cookies in your browser, but signing in will then not work.
How long we keep data
| Data | How long |
|---|---|
| Uploaded files and results | Deleted automatically, 30 minutes after creation. |
| Account details | Until you delete your account. |
| Usage history of a signed-in user | Until you delete your account, or until you delete an entry in your Activity list. |
| Usage records of visitors without an account | These carry no name or email. They are not deleted on a fixed schedule at the moment. You can ask us to remove them. |
| Contact messages and screenshots | For as long as needed to answer you and keep a support record. You can ask us to delete them. |
| Server logs | Kept in rotating log files, where the oldest entries are overwritten once the files are full. |
Your choices and rights
- Look at and edit your details in Dashboard, Settings: your email, password, name and notifications.
- Delete your account in Dashboard, Settings. This permanently removes your account, activity history, tokens, API keys and payment records.
- Ask us for a copy of your data, to correct it, to delete it (including support messages), to restrict or object to its use, or to transfer it. Write from the email address on your account so we can confirm it is you.
- Withdraw consent at any time where we rely on it.
- If you live in the EEA or the UK you may complain to your local data protection authority. Residents of some US states have similar rights, which you can use through the same address. We do not sell personal information.
We aim to answer privacy requests within one month.
Security
We protect data with HTTPS, salted password hashing, automatic file deletion and rate limits. No system is perfectly safe. The Security page sets out what we do and where the limits lie.
Data abroad
Our hosting provider’s servers may be in a different country from yours, so your data can be processed outside your own country. We choose providers that apply suitable safeguards for such transfers.
Children
Accounts are for people aged 18 and over, and the service is not aimed at children. If you believe a child has given us personal data, contact us and we will delete it.
Changes
When we change how data is handled, we will update this page. For significant changes we will make a reasonable effort to let you know, for example on the site or by email.
Contact
Questions about this policy? Email [email protected] or use the Contact page.