Privacy Policy

Last updated: September 4, 2026

OnlinePDFPro (“we”, “us”, “our”) provides browser-based document tools and a small library of paid study materials. This policy explains what is processed locally, what leaves your device, and which providers receive data when a feature requires them.

1. Information we collect

Accounts and purchases

If you create an account, Supabase Auth receives and stores your email address, account profile, authentication data, and (if you use Google sign-in) the name, email address, and profile photo supplied by Google. For study-material purchases, we store order identifiers, product identifiers, payment references, entitlement status, and the account connected to the purchase. Razorpay processes your payment details; OnlinePDFPro does not receive or store your card, UPI, bank, or wallet credentials.

Purchased study materials

Purchased files are stored in a private Cloudflare R2 bucket. When you request a download, the server verifies your authenticated account and purchase entitlement before streaming the file.

Usage and technical data

Our hosting, CDN, and security providers may process IP address, browser/device information, and request timestamps for security, reliability, and support. Optional Google Analytics loads only after you choose “Allow analytics.” Our own analytics events describe page visits, file selection (type, count, and size range), and tool interactions or downloads; they do not include document contents, file names, email addresses, authentication tokens, or URL query/fragment values. Google may process browser/device information and set analytics cookies when you opt in. We do not sell personal information.

2. What happens to your files

Tools that are labelled local read the file in your browser and do not upload it. Browser processing still creates temporary in-memory or local browser data while the page is open. Do not rely on a generic “never leaves your device” statement: each tool page identifies exceptions.

3. Third-party services

Each provider has its own terms and privacy policy. The provider list and tool disclosures may be updated when our architecture changes.

4. Cookies, storage, and service worker

We use browser storage for theme preference, recent-tool/history data, cart state, your analytics privacy choice, and Supabase authentication session data. The site may register a service worker to cache static assets and provide an offline shell. Choose “Essential only” to use the site without optional Google Analytics. You can change your choice using “Privacy choices” in the footer; withdrawing analytics consent stops our measurement and removes Google Analytics cookies set for this site. Clear site data in your browser to remove local storage and cached assets. Security providers may use storage needed for their verification features.

5. Retention and deletion

Local files and generated outputs remain under your control unless you upload them to an external provider. External providers apply their own retention, deletion, and abuse-monitoring rules. Account and purchase records are retained while needed to provide the service and meet legal, tax, dispute, and security requirements. Contact us if you need account deletion or a data-access request.

6. Security

We use HTTPS, a Content Security Policy, server-side payment verification, authentication checks, rate limiting, and bounded conversion/OCR requests. No internet transmission or third-party service is completely risk-free. Keep passwords and private documents out of public QR links and do not share conversion or AI outputs containing sensitive data.

7. Your choices and rights

8. Children

Our services are not directed at children under 13, and we do not knowingly collect personal information from children.

9. Changes and contact

We may update this policy when features, providers, or legal requirements change. The date above identifies the current revision. Questions or requests can be sent to support@onlinepdfpro.com.