Privacy policy

The data controller is AI Solutions Apps S.L. (tax ID ESB22852297), a company incorporated under the laws of Spain, with registered office at C/ creueta, 08870 Barcelona, Spain. We process the personal data you provide while using the Site or editor for the purpose of running the service, in compliance with Regulation (EU) 2016/679 (GDPR) and applicable national law. To exercise your rights or contact the controller: support@absolutepdf.com.

You can browse without giving us anything. To register or subscribe we need some personal data. We collect it automatically (connection IP, device type and characteristics, operating system, browser, language, date and country of the request), from what you voluntarily enter, and from third parties such as payment processors. Specifically:

• Account: email, name, hashed password (or Google ID).
• Billing: invoices and payment method tokens (held by Stripe, not us).
• Files: by default PDFs are processed in your browser and never uploaded to our servers. If you save them to your cloud library, we store them encrypted while your account stays active.
• Usage: page views and feature events measured with self-hosted, cookieless Plausible Analytics — aggregated and anonymous, with no third-party ad networks and no cross-site tracking.
• Support: messages you send to support, retained 24 months.
• Marketing attribution: if you arrive from an ad, we store the click identifier (gclid/gbraid/wbraid) in your browser's local storage for up to 90 days to attribute the sign-up. It isn't a cookie and carries no profile.

• Charge you and keep tax records (legal basis: legal obligation).
• Provide the editor (legal basis: contract).
• Detect abuse and protect accounts (legal basis: legitimate interest).
• Improve the product via aggregated metrics (legal basis: legitimate interest).
• Measure ad campaigns and attribute conversions, reported server-to-server to Google Ads via its API — never through third-party tracking tags in your browser (legal basis: legitimate interest).
• Send product news only with your consent — and only if you've opted in (legal basis: consent).

Subprocessors only: Stripe (payments), Resend (transactional email), Cloudflare (CDN/security), OVH (hosting). Each is GDPR-bound and hosted in the EU/EEA. Website analytics run on our own self-hosted, cookieless Plausible instance — the data stays with us and isn't shared with any third-party analytics processor. Ad-campaign attribution is sent directly to Google Ads server-to-server via its API; no third-party ad cookies are set. No advertising networks. No selling of personal data ever.

We keep data only as long as necessary. Where the law sets minimum retention periods we observe them: up to 6 years for accounting records and invoices (art. 30 of the Spanish Commercial Code) and up to 5 years for personal actions without a special limitation period (art. 1964 of the Spanish Civil Code). For users without a contract we keep data for a maximum of 12 months to handle their requests.

• Billing records: up to 6 years (Spanish commercial and tax law).
• Files: stored on our servers only if you save them to your cloud library; in that case, while your account stays active.
• Account data: while your account is active.
• After deletion: 30 days for recovery, then erased.

You have the right of access, rectification, erasure, restriction, portability and objection over your personal data, and you can withdraw consent at any time. Email support@absolutepdf.com or by post at C/ creueta, 08870 Barcelona, Spain from the address linked to your account — we reply within 30 days. For complex requests we may need extra time and will tell you within that window. You can also file a complaint with the Spanish Data Protection Agency (AEPD).

All processing happens inside the EU/EEA. We don't transfer personal data outside the EEA. The subprocessors we use (Stripe, Resend, Cloudflare, OVH) process data inside European territory, under standard contractual clauses where applicable.

TLS 1.3 for all traffic. AES-256 for files at rest. Encrypted backups. Service account credentials are encrypted at the application layer and never stored in plain text. Internal staff access is scoped to operational need and audited. Absolute security can't be guaranteed, so please apply common sense with what you share.

AbsolutePDF isn't directed to children under 14 and we don't knowingly collect data from minors. If you believe a minor has signed up, write to support@absolutepdf.com and we'll erase the account and associated data.

Material changes are announced by email and posted here at least 30 days before they take effect. The last-updated date is shown at the top of this page. If you don't agree with the changes, you can delete your account before they kick in.

For anything related to your personal data, write to support@absolutepdf.com or by post at C/ creueta, 08870 Barcelona, Spain. If you believe we mishandle your data, you can file a complaint with the Spanish Data Protection Agency (AEPD) or with the supervisory authority of the EU country where you usually reside.