PDFTranslate

Privacy Policy

How PDFTranslate handles account, billing, and document data

Privacy Policy

Effective date: August 23, 2026 · Commercial launch controls remain pending

PDFTranslate (pdftranslate.io, “PDFTranslate”, “we”, “us”) is a PDF machine-translation service. This policy explains what information we handle, why we handle it, how long we keep it, and the choices available to you.

PDFTranslate is operated by INNOMATRIX LIMITED, a UK private limited company (Company No. 16188012). Its registered office is 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. The company record can be verified through Companies House.

Any data-protection representative required for a market will be identified before the Service is offered there. This policy does not imply that a representative has been appointed where that fact has not been verified.

Information we handle

Account and support information

We may process your name, email address, authentication records, language preference, support messages, and account settings. Authentication providers may send us basic profile information when you choose social sign-in.

Billing information

Payment providers process payment-card and bank details. We receive transaction identifiers, billing status, plan, amount, currency, and limited billing contact information needed to operate subscriptions, issue credits, prevent fraud, and keep financial records. We do not intend to store complete card numbers.

Documents and translation data

To provide the service, we process the PDFs you upload, extracted text, OCR and layout data, translation requests, intermediate artifacts, translated PDFs, and quality signals. A document can contain personal or confidential information chosen by the uploader.

Technical and usage information

We may process IP address, browser and device details, timestamps, security events, referral/UTM data, feature usage, job state, page count, processing time, provider cost, and error codes. Product analytics must not contain document text or sensitive file names.

How we use information

We use information to:

  • authenticate users and operate accounts;
  • upload, inspect, translate, rebuild, deliver, and delete documents;
  • calculate quotes, reserve and settle credits, and process payments;
  • prevent abuse, malware, fraud, and unauthorized access;
  • diagnose failures and measure reliability and cost;
  • provide support and send service notifications;
  • comply with legal obligations and enforce our Terms.

We do not use customer documents to train our own or a third party’s general-purpose AI model. We do not sell personal information. We do not use document contents for advertising.

Service providers and transfers

We use vendors for infrastructure, storage, databases, authentication, payments, email, analytics, security, OCR, and machine translation. They may process data only as needed to provide their contracted service and under their own terms and data-protection commitments.

The final production subprocessor list, processing regions, international-transfer mechanism, and data-processing agreement must be published before launch. Machine-translation routing should prefer providers and regions compatible with the user’s selected service tier.

Retention and deletion

The intended default retention is:

  • incomplete uploads: automatically removed within 24 hours;
  • source PDFs: removed after processing or within 24 hours, whichever is earlier unless a clearly disclosed retry window requires otherwise;
  • translated PDFs: available for up to 7 days by default;
  • processing intermediates: removed when no longer needed, normally within 24 hours;
  • account, transaction, credit-ledger, fraud, and security metadata: retained as required for account operation, dispute handling, tax, accounting, security, and legal obligations.

Users can request immediate deletion from translation history. Deletion removes known source, intermediate, and result objects and makes future downloads unavailable. Short-lived download links already issued may remain usable until they expire. Backups and legally required records may take longer to age out and remain access-restricted.

These timelines are product commitments only after R2 Lifecycle rules, worker cleanup, retry handling, and deletion audits have passed production verification.

Security

We design the service around private object storage, short-lived signed upload and download URLs, least-privilege access, encrypted transport, secret management, file validation, malware and active-content checks, audit events, and content-free logs. No internet service can guarantee absolute security.

Do not upload a document unless you are authorized to process and translate it. For highly sensitive material, wait until the applicable security, residency, and contractual controls are shown in your account.

Depending on where you live, we process information to perform our contract with you, comply with law, protect legitimate security and operational interests, and obtain consent where required.

You may ask to access, correct, export, or delete eligible personal information; object to or restrict certain processing; withdraw consent; or appeal a privacy decision where local law provides those rights. You may also have the right to complain to a supervisory authority.

To submit a request, email privacy@pdftranslate.io. We may need to verify your identity and authority over the account.

Children

PDFTranslate is not directed to children under 13, or the higher minimum age required by local law. We do not knowingly collect children’s personal information without valid authorization.

Changes

We may update this policy as the product, vendors, or laws change. Material changes will be announced in the service or by email when appropriate. The effective date above identifies the current version.

Contact