Privacy Policy

1. Introduction

CHATWITHPDFAI, Inc. ("we", "us", "our") provides a service that lets you upload PDF documents and chat with them using AI. This Privacy Policy explains what data we collect, what we do with it, and the rights you have over it.

This policy is written in plain English. The defined terms are bold; capitalized phrases like Personal Data mean the same thing they would in the GDPR.

Short version: We collect what we need to run the service. We do not sell your data. We do not train AI models on your files. You can delete your account and your documents at any time.

2. Data we collect

2.1 Account data

When you create an account, we collect your name, email address, and an encrypted password. If you sign in with Google, Apple, or SSO, we receive your name and email from that provider.

2.2 Document content

We store the PDFs you upload and the chat history you generate. Documents are encrypted at rest (AES-256) and in transit (TLS 1.3). We do not read, scan, or review the contents of your documents except as needed to provide the service (e.g. running OCR, extracting text for the AI model).

2.3 Usage data

We log standard server data: IP address, user agent, request timestamps, and feature usage (e.g. how many credits you have spent). We use this to debug, prevent abuse, and improve the product.

2.4 Billing data

We use Razorpay as our payment processor. Razorpay collects your card number directly — we never see or store it. We receive only the last 4 digits, card brand, and a token we use to charge you.

3. How we use your data

We use your data to:

• Provide the service (process uploads, generate answers, cite sources)
• Authenticate you and keep your account secure
• Bill you and prevent fraud
• Send transactional emails (receipts, security alerts, password resets)
• Send product emails only if you opt in
• Debug, monitor, and improve the service
• Comply with legal obligations

We do not use your documents or chat content to train AI models. This is contractual with us and with every third-party model vendor we use (see Sub-processors below).

4. Who we share it with

We share data only with sub-processors who help us run the service. The full list is at /legal/sub-processors. The categories are:

We will never sell your data. We will only disclose data to law enforcement under a valid legal process and will notify you unless legally prohibited.

5. Retention & deletion

We keep your data for as long as your account is active. When you delete a document or your account:

• Hot data is removed within 24 hours
• Encrypted backups are purged within 30 days
• You receive a deletion receipt by email with the timestamps

Anonymized usage logs (no identifiers, no document content) may be kept up to 24 months for capacity planning.

6. Your rights

Depending on where you live (GDPR for EU/UK, CCPA for California, similar laws elsewhere), you have the right to:

• Access the data we hold about you
• Correct anything that's wrong
• Delete your account and data
• Export your data in a machine-readable format
• Object to or restrict certain processing
• Withdraw consent for optional processing (analytics, marketing)

To exercise any right, email privacy@chatwithpdfai.com. We respond within 30 days, usually faster.

7. International transfers

We are a US company. If you are in the EU, your data may be transferred to the US. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for these transfers. You can request a copy of the SCCs by emailing privacy@chatwithpdfai.com.

Enterprise customers (Chamber plan and above) can elect EU data residency — your documents and chat history stay in eu-west-1.

8. Children

CHATWITHPDFAI is not directed at children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, contact privacy@chatwithpdfai.com and we will delete it.

9. Changes to this policy

If we make material changes, we will email you at least 30 days before they take effect. The full change history is published at chatwithpdfai.com/legal/changelog.

10. Contact

Data controller: CHATWITHPDFAI, Inc., 548 Market St #84219, San Francisco, CA 94104, United States.

Email: privacy@chatwithpdfai.com (privacy requests), dpo@chatwithpdfai.com (DPO / GDPR), support@chatwithpdfai.com (general).

Questions? Email support@chatwithpdfai.com or write to: CHATWITHPDFAI, Inc., 548 Market St #84219, San Francisco, CA 94104.