Privacybeleid
Laatst bijgewerkt: 30 oktober 2026
Dit document wordt in het Engels verstrekt. De Engelse versie is juridisch bindend.
Ludovick Guitton ("we") is the controller of the personal data processed through PDFtoWorld. Contact our data protection contact at [email protected].
1. Data we process
- Account data: email, name, authentication provider identifiers, language.
- Documents: files you upload and the files we generate, stored encrypted and deleted automatically after 24 hours. Many free tools (image conversions, developer tools, simple PDF operations) run entirely in your browser: those files never reach our servers.
- Signature requests: the document, signers' names, emails, IP addresses and timestamps (audit trail), kept 30 days so every party can download the signed copy.
- Digital signature certificates you provide are used in memory for the signature only and never stored.
- Billing data: subscription status, invoices. Card details are handled by Stripe and never reach our servers.
- Usage and security data: tool usage, IP address, device and log data, consent records.
- Support conversations: your account, request subject and messages exchanged with our human support team. Each message is also copied by email; do not include passwords, payment card details or confidential documents.
2. Purposes and legal bases (GDPR art. 6)
| Purpose | Legal basis |
|---|---|
| Providing the tools and your account | Contract (6(1)(b)) |
| Payments, invoicing, tax records | Contract; legal obligation (6(1)(c)) |
| Security, fraud and abuse prevention, rate limiting | Legitimate interest (6(1)(f)) |
| Transactional emails (receipts, trial reminders) | Contract |
| Product analytics (PostHog), advertising measurement | Consent (6(1)(a)) |
| Cookieless audience statistics (Plausible) | Legitimate interest |
3. Retention
Documents: 24 hours (signature requests: 30 days). Account data: for the life of the account, then deleted within 30 days. Invoices: as required by tax law (up to 10 years). Security logs: 12 months. Consent records: 5 years.
Support conversations on the site are deleted 90 days after closure, or when the account is deleted. They are included in your account data export. Email copies in recipients' mailboxes are managed separately by those recipients.
4. Processors and transfers
| Processor | Purpose | Location / safeguard |
|---|---|---|
| Supabase Inc. | Database, authentication | EU (Paris) region |
| Cloudflare Inc. | CDN, security, file storage (R2) | EU jurisdiction bucket; EU SCCs + EU-US DPF |
| Contabo GmbH | Application hosting and document conversion workers | Self-hosted VPS; provider details: https://contabo.com/en-us/legal/impressum/ |
| Stripe Payments Europe Ltd. | Payments, invoicing | EU (Ireland); independent controller for fraud prevention |
| Resend Inc. | Transactional emails | EU SCCs + EU-US DPF |
| Microsoft Clarity | Public-page behavioural analytics/session recordings, only with consent; ads storage denied | Microsoft processing locations and applicable transfer safeguards: see https://privacy.microsoft.com/privacystatement |
| Google Tag Manager | Consent-gated tag delivery; only consent flags are pushed by this integration | Google privacy/transfer terms: https://policies.google.com/privacy |
| PostHog Inc. | Product analytics (with consent) | EU Cloud (Frankfurt) |
| Plausible Insights OÜ | Cookieless audience measurement | EU (Germany) |
Transfers outside the EEA rely on adequacy decisions (including the EU-US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.
5. Your rights
You can access, rectify, erase, restrict, object to processing of and port your data, and withdraw consent at any time. Most rights are available directly in Dashboard → Security (data export and account deletion). Otherwise write to [email protected]. You may lodge a complaint with your supervisory authority (in France, the CNIL).
6. Automated processing
Document conversions and local text extraction run when you request them. Scanned documents are not sent to an external OCR service. Generative document analysis, translation and chat are not offered in this release. No decision producing legal effects about you is made by automated means.
7. Security
TLS encryption in transit, encryption at rest, row-level security in our database, malware scanning of uploads, least-privilege access and audit logs.