PDF2URL Privacy Policy

Last Updated: July 30, 2026 PDF2URL (“we,” “us,” or “our”) operates the website https://pdf2url.com, a free online PDF-to-shareable-link conversion service. We are committed to protecting your privacy and complying with global data regulations including GDPR, CCPA, and other regional privacy laws. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the PDF2URL Service, as well as your legal data rights.

By accessing or using our website and conversion tools, you acknowledge you have read, understood, and agree to this Privacy Policy. We may revise this Policy for material changes and will notify users via on-site announcements or registered email where applicable. This document is a regulatory-aligned template and does not constitute formal legal advice; consult a local data compliance professional before formal publication if your jurisdiction has special data rules.

1. Data Controller

The data controller responsible for all personal data processing under this Service is set forth below:

Company Name: PDF2URL Operations
Registered Address: Global Cloud Operations, neutral hosting jurisdiction (contact privacy team for full registered legal address upon request)
Privacy Contact Email: [email protected]
Data Protection Officer (DPO): Not applicable; all data privacy inquiries are routed to the privacy email above

2. Personal Information We Collect

We split collected data into information you actively provide and automatically captured technical/usage data. We do not collect unnecessary personal data; unused data categories below may be removed at your discretion.

2.1 Information You Provide Directly

PDF2URL supports fully anonymous conversion without mandatory account creation, but collects the following if you choose to register an account or submit support requests:

Account Info (optional): Email address, encrypted account password if you sign up for premium analytics/link management features
Uploaded User Content: PDF documents (max 50MB) you submit for link generation; all uploaded file content is treated as user-provided data
Support Communications: Emails, feedback, trouble tickets, and messages you send to our support team
Custom Link Settings: Passwords you set for protected PDF links, custom link expiration timelines you configure

We do not store full payment card data. If premium paid features are launched in the future, all payment transactions will be processed exclusively by our PCI-DSS certified payment processor Waffo Pancake; card credentials never reside on our servers.

2.2 Information We Collect Automatically

Every visitor to pdf2url.com generates passive log data, collected automatically when you load the website or upload files:

Device & Network Metadata: Public IP address, device model, operating system, browser type, browser language, time zone
Service Usage Data: Pages viewed, upload timestamps, file conversion session records, generated PDF link IDs, link view/click/download analytics metrics
System Logs: Request timestamps, error logs, service performance metrics, traffic source referral data
Analytics Tracking Data: Link visitor geographic location, visitor device type, access timestamps for your shared PDF URLs

Optional Data Categories (Only if enabled by you)

No third-party social login integrations active on pdf2url.com at this time; this section may be deleted.
No persistent location tracking enabled unless you voluntarily view link analytics for your shared documents.

3. How We Use Your Information

Below is the breakdown of processing purposes paired with valid GDPR legal bases for all data operations:

| Purpose of Processing | Legal Basis under GDPR | |----------------------|------------------------| | Deliver core PDF conversion service, generate secure shareable links, host uploaded files | Contract performance | | Process account registration, manage saved links, password & expiration link controls | Contract performance | | Respond to customer support inquiries, resolve upload/access technical issues | Contract / Legitimate interests | | Send critical service notifications: platform downtime, security alerts, policy updates | Legitimate interests | | Detect abuse, fraud, malicious uploads, unauthorized access, and enforce service safety rules | Legitimate interests | | Collect anonymous usage statistics to optimize website speed, conversion tool performance, and feature improvements | Legitimate interests | | Comply with legal obligations, court orders, or official regulatory data disclosure requests | Legal obligation | | Marketing communications (only if you explicitly opt-in to promotional emails about platform updates) | Your consent |

We aggregate and anonymize raw usage data for internal statistical analysis. Aggregated anonymized data cannot be linked back to any individual user and may be retained long-term for product improvement.

4. Cookies & Tracking Technologies

PDF2URL uses standard browser cookies and lightweight tracking pixels for core functionality and analytics. All non-essential tracking tools can be disabled via browser cookie controls or our on-site Cookie Preference Center.

| Cookie Type | Core Purpose | User Disableable? | |------------|-------------|-------------------| | Strictly Necessary | Maintain anonymous upload sessions, secure file transmission, account login state for registered users | No | | Functional | Save your cookie preference settings, saved custom link password/expiration defaults | Yes | | Analytics | Collect anonymous website traffic and link engagement statistics to optimize platform performance | Yes | | Marketing (Optional) | Targeted promotional email measurement only for opted-in users | Yes |

Active analytics tools deployed on pdf2url.com: Google Analytics. You may review Google’s independent privacy policy via Google’s official documentation to understand their data handling rules.

5. Sharing & Disclosure of Your Personal Information

PDF2URL does NOT sell, rent, or trade your personal information to third parties for commercial purposes, consistent with CCPA and global privacy standards. We only share limited data under the following strictly defined scenarios:

Authorized Service Providers We share necessary data with cloud hosting, security, analytics, and support vendors bound by formal non-disclosure data processing agreements. If premium payment features launch, payment card data will be processed solely by PCI-DSS certified processor Waffo Pancake; card data is never stored on our servers.
Legal Mandates We may disclose your data if required by binding law, valid court subpoena, regulatory official data access request, or to protect our legal rights and platform safety.
Business Transaction Events In the event of platform merger, acquisition, asset sale, or business restructuring, user data may transfer to the successor entity, with prior user notice and unchanged privacy safeguards.
Explicit User Consent We will never share your personal data for external third-party marketing or unrelated services unless you provide separate, written explicit consent.

No business partner data sharing flows are active for pdf2url.com at present; this subsection may be removed from your live policy. No third-party API data integrations share user personal data externally.

6. Data Security Protections

We implement enterprise-grade security controls to protect all user data and uploaded PDF content:

In-transit encryption: All website traffic and file uploads protected via TLS 1.3 / HTTPS
At-rest storage encryption: Passwords are hashed with industry-standard algorithms; all uploaded PDF files are encrypted on cloud storage servers
Access control rules: Staff follow least-privilege access policies; all internal team members sign binding confidentiality agreements
Routine security audits: Quarterly vulnerability scanning and platform penetration testing
Additional safeguards: Cloud provider DDoS protection, access log monitoring for suspicious file upload behavior

Security Breach Notification Rule

If a security incident compromises your personal data or uploaded document privacy, we will notify affected users and relevant local data protection authorities within 72 hours of discovering the breach, as required by GDPR and regional privacy legislation. All users must safeguard their own account login credentials and avoid sharing access to saved PDF link dashboards.

7. Data Retention Schedules

We retain data only for the minimum time necessary to fulfill the purpose it was collected for. Retention timelines below apply to all data categories:

| Data Category | Retention Period | Action Upon Expiry | |--------------|------------------|--------------------| | Anonymous user uploaded PDF files (no account) | Permanent until user manually deletes link; unaccessed anonymous links auto-deleted after 12 months | Permanent secure server deletion | | Registered account information | Retained while account is active; 2 years permanent storage after user account deletion request | Full anonymization or secure deletion | | Saved PDF links & link analytics records | 24 months after the link’s expiration date | Secure archive then permanent deletion | | Customer support ticket communications | 3 years from ticket closure | Secure permanent deletion | | Security & access audit logs | 18 months | Secure permanent deletion |

8. Your Data Subject Rights

All users worldwide hold the following privacy rights under applicable regulations (GDPR, CCPA, and equivalent national data protection laws). To submit a rights request, email [email protected]; we guarantee a formal written response within 30 calendar days of receiving your valid identity-verified request.

| User Right | Full Description | |-----------|-----------------| | Right to be informed | Receive clear disclosure of all personal data we collect and how we process it (this Privacy Policy fulfills this obligation) | | Right of access | Request a complete machine-readable copy of all personal data linked to your usage of pdf2url.com | | Right to rectification | Submit corrections for inaccurate or incomplete account/profile data | | Right to erasure (“Right to be Forgotten”) | Request full permanent deletion of your account, uploaded PDFs, and all associated personal data under qualifying conditions | | Right to restrict processing | Temporarily pause analytics or marketing data processing for your records | | Right to data portability | Export your account data, saved link records, and analytics in standard machine-readable format | | Right to object | Object to data processing performed under legitimate interests (including analytics tracking) or opt out of marketing emails | | Right to withdraw consent | Revoke any prior consent granted for marketing tracking or promotional communications at any time |

If you believe we have violated applicable data privacy laws in processing your information, you retain the right to submit a formal complaint to your local national data protection authority (DPA).

9. Marketing Communications & Opt-Out Controls

We only send marketing/promotional emails about PDF2URL platform features, tool updates, or service improvements if you actively opt-in during account registration. Marketing communications may be delivered via email or in-site dashboard notifications.

You may opt out of all marketing messaging at any time through three independent channels:

Click the “Unsubscribe” hyperlink included at the footer of every marketing email
Toggle marketing communication opt-out settings within your registered account dashboard
Send a direct opt-out request to [email protected]

Opting out of marketing does NOT disable mandatory critical service notifications, including security alerts, platform maintenance announcements, and billing updates for premium feature users.

10. International Data Transfers

PDF2URL’s cloud hosting servers and third-party service vendors operate across multiple global regions, including North America, Europe, and Southeast Asia. When personal data crosses international jurisdictional borders, we enforce the following legal safeguards to maintain compliant data protection:

All cross-border data processing agreements incorporate EU Standard Contractual Clauses (SCCs), the primary GDPR-approved transfer mechanism
Data is only transferred to cloud providers with verified equivalent privacy protection standards recognized by EU adequacy rulings
Additional safeguards: Cloud data isolation, encrypted cross-region data pipelines

11. Children’s Privacy Protection

The PDF2URL service is intended exclusively for users aged 16 years and older (GDPR baseline minimum age). We do not knowingly collect personal identifiable information or uploaded documents from children under 16. If you are a parent or legal guardian and discover your minor child has submitted personal data or PDF files to our platform without your consent, contact [email protected] immediately, and we will fully delete all child-associated data within 5 business days.

12. Third-Party Links & External Services

Our website may contain hyperlinks to external third-party websites (cloud storage providers, analytics platforms, file sharing services). This Privacy Policy governs only data collected directly by PDF2URL via https://pdf2url.com. We accept no legal responsibility for the data privacy practices, tracking policies, or security of any external third-party site you navigate to from our platform. We strongly recommend reviewing each third party’s independent privacy policy before submitting personal data on their services.

13. Policy Modifications & Updates

For material changes to this Privacy Policy (e.g., new data collection categories, revised retention rules, cross-border data transfer updates), we will provide a minimum of 15 days advance public notice via prominent on-site banner announcements and registered user email alerts. The “Last Updated” date at the top of this document will always reflect the latest effective version of the policy. Your continued use of pdf2url.com after the updated policy effective date constitutes full acceptance of all revised terms.

14. Contact Information for Privacy Inquiries

All privacy, data rights, security, or compliance questions may be directed to our dedicated privacy team via the channels listed below:

Privacy Inquiry Email: [email protected]
General Support Email: [email protected]
Platform Legal Entity Name: PDF2URL Operations
Mailing Address (for formal written requests): Request full registered postal address via [email protected]
Support Service Hours: Monday–Friday, 09:00–18:00 UTC+0

Disclaimer: This Privacy Policy is built from a GDPR/CCPA compliant template provided by Waffo Pancake merchant documentation and is for general compliance reference only. It does not constitute formal legal advice. Before publishing this policy live on https://pdf2url.com, engage a qualified data protection legal professional licensed in your primary operating jurisdiction to review and adjust all data practices, retention periods, and regional compliance clauses to match your exact platform operations.

PDF2URL Operations · https://pdf2url.com