Privacy Policy

ZeroPDF was created by Luís Cardoso, an independent developer in Portugal. Document privacy is a core product principle.

This policy separates two different things: PDFs and results generated locally in your browser, and the limited data that may be needed for authentication, payments, support, security, and operation of the service.

ZeroPDF's main tools process PDFs in the user's browser or device. Under normal operation, document contents are not sent to ZeroPDF servers to perform those local actions.

• PDFs are processed locally in the browser or device.
• Document contents are not sent to ZeroPDF servers for the local tool operation itself.
• ZeroPDF does not keep copies of PDFs processed locally.
• ZeroPDF cannot view or recover a local document, and it remains on your device after it is created.
• PDF names and contents are not meant to be part of normal analytics, authentication, or billing flows.
• Results are created and downloaded on the device itself.

When you use authentication, ZeroPDF relies on Clerk to manage session state, identity, sign-in status, and the account elements needed to operate the service.

This may include, for example, email address and account identifiers supplied during authentication, as well as metadata needed to reflect Pro plan status.

Where applicable, ZeroPDF may store a signed token on the device so that Pro access can be confirmed temporarily without an active connection. This exists to keep eligible features available for short offline periods.

That token has a maximum validity of seven days, can be renewed when the connection returns and eligibility is still valid, and is removed or no longer accepted when it becomes invalid, expires, or no longer matches the account state.

Payments and checkout management are processed by Stripe. ZeroPDF should not directly store full card details.

Stripe receives the data needed to process payment. On the ZeroPDF side, customer and subscription identifiers, subscription status, relevant renewal information, and the email needed for support and billing context may be stored.

Depending on the interaction, the infrastructure and providers involved in the service may process IP address, browser or device data, request metadata, technical logs, errors, and operational events.

These data may be used for reliability, abuse prevention, debugging, security, and incident response. They should not be used to collect the contents of locally processed PDFs.

The site uses Google Tag Manager and, in the current configuration, Google Analytics 4 measurement technologies. These technologies are used to measure site usage and performance.

Non-essential analytics technologies are optional. GTM and GA4 should only load after explicit acceptance, refusing analytics does not prevent use of the tools, and the choice can be changed later from the Cookies page.

• Provide and operate the ZeroPDF service.
• Authenticate users and maintain account sessions.
• Manage subscriptions, Pro status, and access to eligible features.
• Allow temporary confirmation of Pro status while offline.
• Process payments, checkout, and the billing portal.
• Respond to support and operational questions.
• Protect the service, detect abuse, and investigate technical failures.
• Improve service operation and measurement when permitted.

• Performance of a contract or pre-contractual steps to provide the account, tools, and subscription.
• Compliance with legal, tax, accounting, or regulatory obligations when applicable.
• Legitimate interests related to security, abuse prevention, service stability, and operational support, where proportionate.
• Consent for optional technologies, such as non-essential measurement, where legally required.

ZeroPDF uses confirmed providers for specific functions. Each provider should process only the data needed for its role.

• Clerk, for authentication, session, identity, and account metadata related to access.
• Stripe, for checkout, billing, and subscription management.
• Cloudflare, for infrastructure, delivery, and technical components involved in running the application.
• Google Tag Manager and Google Analytics 4, for loading and measuring the analytics technologies currently configured on the site.

Data are kept only for the period needed for the applicable purposes. Some elements may be retained longer because of legal, tax, security, technical audit, or dispute-resolution requirements.

PDFs processed locally do not have a retention period at ZeroPDF because they are not received by the service. The offline Pro mechanism expires after no more than seven days.

Depending on the applicable framework, you may exercise the following rights:

• Access to personal data.
• Rectification of inaccurate or incomplete data.
• Erasure, where applicable.
• Restriction of processing, where applicable.
• Objection to certain processing based on legitimate interests.
• Data portability, where applicable.
• Withdrawal of consent for optional technologies when consent is the applicable basis.

support@zeropdf.app

Users in Portugal may lodge a complaint with the Comissão Nacional de Proteção de Dados, without prejudice to any other available remedies. official CNPD website.

Reasonable technical and organizational measures are applied to reduce risk, protect accounts, support payments, and limit undue exposure of data. Even so, no system can guarantee zero risk.

Security page

This policy may be updated to reflect service changes, legal requirements, or operational decisions. The date of the latest revision will be shown on this page.

If you have questions about this policy or about personal data related to the service, you can contact:

support@zeropdf.app