Legal
Privacy Policy
Last updated: October 18, 2026. This policy explains how PDF Toolkit handles account, payment, and usage data.
What We Collect
We collect the information needed to operate PDF Toolkit: your email address, authentication session data, subscription status, product usage limits, support messages you choose to send, and technical events such as request timestamps and error logs.
PDF Files
Core PDF actions are designed to run in your browser where practical. Files you choose for merge, split, rotate, organize, watermark, page numbering, and similar tools are processed locally unless a feature clearly asks you to send content to an external service.
Files uploaded for cloud-tool processing are handled in memory or in temporary files on our own processing servers and are deleted immediately after the conversion finishes.
Payments
Paid subscriptions are processed by Stripe. We do not store full card numbers. Stripe provides us with billing status, customer identifiers, invoice events, and subscription events so we can unlock paid access.
How We Use Data
- Provide account access, free trials, paid entitlements, and usage limits.
- Operate PDF tools and browser-based workflows.
- Improve reliability, prevent abuse, and diagnose errors.
- Respond to support requests and billing questions.
Data Sharing
We share data with service providers only as needed to run the product, including Cloudflare for hosting and security and Stripe for payments.
Retention
We keep account, billing, and operational records for as long as needed to provide the service, meet legal obligations, resolve disputes, and prevent abuse. Browser-local PDF files remain under your control.
Your Rights (GDPR)
If you are in the EU/EEA or UK, you have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. To exercise any right — including Article 17 erasure of your account, sessions, usage records, and support messages — email us at privacy@steadseek.com. We respond within 30 days. Erasure of billing records may be limited where retention is required by tax law.
Your Rights (CCPA/CPRA)
California residents may request to know what personal information we hold, request deletion, and correct inaccurate data. We do not sell or share your personal information, and we do not use it for cross-context behavioral advertising. Requests: privacy@steadseek.com.
Cookies & Analytics
We use strictly necessary cookies for authentication sessions (microtools auth). Aggregate, privacy-focused traffic measurement is provided by Cloudflare Web Analytics. Payment pages are hosted by Stripe (buy.stripe.com) and may set their own cookies under their privacy policy. We use no advertising trackers.
International Transfers
Hosting and security are provided by Cloudflare; payments by Stripe. Cloud-tool file processing runs on servers we operate with our infrastructure provider. Files are transient (deleted immediately after processing). If you need details of processing locations or standard contractual clauses, contact us at privacy@steadseek.com.
Your Choices
You can stop using the service, cancel your subscription through Stripe-supported billing flows, or contact us through the product website for account or data questions. For privacy requests, email us at privacy@steadseek.com.
Changes
We may update this policy as the product changes. The latest version will always be posted on this page.