Privacy Policy

Information we process

Documents: the files you upload, their names and technical metadata, text and images required for editing, your changes, and the previews and downloads you request. Files may contain personal information about you or others.

Temporary credentials: a PDF password you enter to open or protect a document. It is used for that operation and may be included in private temporary transfer data or processing files. It is not stored in the saved source-document metadata or browser drafts.

Existing account records (where applicable): your username, a salted Argon2id password hash, a protected recovery-code digest, an opaque account ID, registration and terms-acceptance times, account sessions and usage counters. Account passwords and recovery codes are not stored as plain text, placed in PDF processing jobs, or saved in browser drafts. New registration and sign-in are currently disabled.

Technical information: network address, request timing, temporary document or session identifiers, file sizes, and usage counters needed to serve requests and enforce resource limits.

Messages: information you choose to provide when contacting us, such as your email address and the content of your request.

Why we use it

We use document content to perform the editing, conversion, OCR, preview, or export operation you request. We use technical information to deliver the website, manage processing capacity, identify faults, and prevent abuse. We use messages to answer you and resolve requests.

While accounts are paused, account sessions do not grant access to additional features and basic PDF requests do not authenticate against account records. Existing records follow their retention rules below. Contact us for an account data request while self-service account management is unavailable.

PDFRev does not sell personal information, use uploaded documents for advertising, or use your content to train AI models. The current editor has no external generative AI integration, advertising pixels, or third-party analytics scripts. OCR and document parsing operate as part of document processing.

Where data protection law requires a legal basis, we rely on providing the service you request, our legitimate interests in operating and protecting it, compliance with applicable legal obligations, or your consent when consent is required. We do not treat this policy itself as consent for unrelated uses.

The contact form saves your message for manual review by the operator. A receipt confirms that the message was stored; it does not mean an email has been sent or that a response time is guaranteed. Your email address is used to contact you about your request, not to subscribe you to marketing.

Temporary files and retention

Uploaded documents are held in private server-side storage so you can continue editing while processing services scale. Each document has a fixed one-hour availability window from upload. After expiry the service stops serving it. Cleanup is scheduled hourly, so stored documents are normally deleted within two hours of upload. A failed or delayed cleanup run can extend storage until the next successful run.

Temporary request transfers can include uploaded content, edits, and PDF passwords. These objects have a ten-minute availability window; successfully consumed uploads are deleted immediately. Generated response and download objects also expire after ten minutes and are deleted after the browser successfully retrieves them. Unremoved objects follow the hourly cleanup schedule. Reusable previews and derived results may also be cached briefly to avoid repeating work.

Processing jobs create private temporary working files. Normal completion, handled errors, and timeouts trigger cleanup. An abrupt system failure can interrupt that cleanup; deletion is not a guarantee of forensic erasure from all underlying storage.

Browser drafts are separate copies on your device. The editor can retain the three most recent drafts, including source files, pending edits, and up to ten saved versions. These drafts do not expire when a server session expires.

Files opened using a PDF password are not automatically saved as local drafts. Files you download remain on your device until you remove them. PDFRev is not a backup service.

Vercel processes connection and operational information such as IP address, request path, timing, response status and browser information. Our application avoids logging document contents, file names, passwords and full request bodies. Provider security and access logs follow the applicable provider settings and obligations; they do not share the document expiry schedule.

Contact form messages are saved in private storage for 30 days, then removed by the hourly cleanup process. A failed or delayed cleanup run can extend storage until the next successful run. The record contains your email address, message, submission time, and receipt reference; we do not add your IP address or browser-session identifier to it.

Account retention and deletion

Account credentials and credential-change records are kept while your account exists. An account session lasts up to seven days. Signing out revokes the current account session; password changes and recovery invalidate previous account sessions. Expired session records are removed by hourly cleanup. Security-attempt and daily-allowance records are normally removed within about two days; cleanup failures can delay removal. Self-service password, recovery and deletion tools are paused; use the Contact page to request help with an existing account.

Deleting an account invalidates its sessions immediately and removes its active credentials. Credential-change records are removed in bounded batches; incomplete or failed deletion is recorded for retry by hourly cleanup. We retain an opaque username reservation and retired account identifier to prevent username reuse and stale-session access. Expiring session and allowance records may remain until cleanup; they are not authorization to use a deleted account.

Temporary PDF documents and browser drafts have their own retention rules. Signing out or deleting an account does not automatically remove an open PDF or browser drafts. Close documents, delete local drafts, or clear site data separately when using a shared device.

Service providers and processing locations

PDFRev uses Vercel to host its website and processing functions. Vercel Blob provides private storage for temporary files, outputs, account records, usage allowances and contact form messages. These providers handle the information needed to deliver and protect the service.

Document storage and processing are configured in Vercel’s iad1 region in the eastern United States. Website traffic may pass through Vercel’s international delivery network. If you use PDFRev from another country, information is transferred to the United States and may pass through other network locations.

Hosting and infrastructure providers process information needed to deliver and protect the service. We do not make your uploads publicly searchable or intentionally publish them. We may disclose information when required by law or when necessary to address a security incident or protect legal rights.

Security and your choices

The public website uses HTTPS for transport. Processing controls include restricted temporary files, bounded jobs, and limits on uploads and requests. No online service or storage system can guarantee complete security.

You can stop using the service at any time. Use Local drafts in the editor to delete a draft, or clear PDFRev’s site data in your browser to remove local copies and session settings. Deleting a browser draft does not itself delete an active server session; server processing data follows the retention rules above.

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, or portability of personal information, to object to certain uses, or to withdraw consent. You may also complain to the relevant data protection authority. Contact us to make a request; we may need proportionate information to verify it. We cannot recover content that has already expired or been deleted.

Other people’s information and children

If your files contain information about others, make sure you have the authority and any required notice or permission to upload and process it. Use the service only where its processing arrangements are appropriate for that information and your obligations.

PDFRev is not directed at children. If you believe a child’s information has been provided without required authorization, contact us so we can address it.

Updates and contact

This policy will be updated when our processing practices change. We will show the revised date and provide additional notice or request consent where required. The Cookies & Local Storage page explains storage on your device in more detail.

For questions or privacy requests, use the Contact page at pdfrev.com/contact. Describe the issue without including a PDF password, confidential document content, or other information that is not needed for your request.