Privacy Policy for PDFdio

Effective Date: September 28, 2026

Last Updated: September 28, 2026

Welcome to PDFdio ("we", "our", or "us"), available at https://pdfdio.com. PDFdio is an in-browser PDF stamping, signing, and document processing utility designed from the ground up to protect user privacy. We are committed to transparency and safeguarding your personal information.

🔒 Our Core Client-Side Privacy Architecture

Your PDF documents never leave your browser. All PDF parsing, stamping, signing, annotations, page reordering, and exports are executed 100% client-side inside your local browser sandbox via WebAssembly and JavaScript. We do NOT upload, inspect, transmit, or store your documents or file contents on any external server.

1. Information We Collect

A. Google Account Information (Sign in with Google)

When you choose to authenticate using Sign in with Google (OAuth 2.0 / OpenID Connect), we request basic profile information permitted by you:

Email address: Used as your unique account identifier.
Full name: Used to personalize your account and label audit certificates for signed documents.
Profile picture / Avatar URL: Used solely to display your avatar in the app header when logged in.

We only request basic Google identity scopes: openid, email, and profile. We do NOT request access to your Google Drive, Gmail, Contacts, or any other sensitive Google Workspace services.

B. User Settings and Saved Stamp Templates

If you create an account, we may store your user preferences, such as saved company stamp designs, custom signature templates, and your recent document signing history (metadata only: date, action, and document title, NEVER the actual document file contents) in our secure database to sync your preferences across your devices.

C. Technical & Log Data

Like most web applications, our hosting and content delivery network providers may log non-identifiable technical data such as browser type, operating system, and IP address for security, abuse prevention, and rate-limiting purposes.

2. How We Use Your Information

We use the minimal information we collect exclusively to:

Provide, authenticate, and maintain your PDFdio user session.
Allow you to access your saved stamps, seals, and digital signature presets across devices.
Maintain customer support and communicate essential security updates.
Prevent fraud, spam, or unauthorized access.

3. What We Never Do With Your Information

We never sell, rent, or trade your data: Your personal information and Google account details are never sold to data brokers or third parties.
No advertising tracking: We do not use your Google account data or document metadata for behavioral advertising or marketing profiles.
No AI Model Training: We do not use your documents, signatures, or personal data to train artificial intelligence or machine learning models.

4. Google API Services User Data Policy Compliance

PDFdio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Storage and Security

We take security seriously:

All data transmissions between your browser and our authentication servers are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
Authentication tokens and database records are managed using Supabase infrastructure with Row-Level Security (RLS) policies, ensuring each user can only read and write their own data.

6. Data Retention and Account Deletion

You have full control over your data:

Request Deletion: You may request the permanent deletion of your account, saved stamps, and all associated personal data at any time by sending an email to surajtuch@gmail.com with the subject "Data Deletion Request". We process all deletion requests within 48 hours.
Revoke Google Access: You can disconnect PDFdio from your Google Account at any time via your Google Account Permissions page.

7. Third-Party Service Providers

We use trusted third-party service providers to deliver the app infrastructure:

Google Identity Services: For user authentication.
Supabase: For cloud authentication token management and database storage.
Netlify: For static frontend hosting and CDN distribution.

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any updates will be posted on this page with an updated "Last Updated" timestamp.

9. Contact Us

If you have any questions or concerns regarding this Privacy Policy or your data, please contact our team:

App Name: PDFdio
Website: https://pdfdio.com
Developer & Support Email: surajtuch@gmail.com