Privacy Policy

Last updated: June 2025

Data Controller

PDF2Audio is operated by CData s.r.o., with its registered seat in Žilina, Slovakia ("we", "us"). We are responsible for the personal data processed through this website. Contact: [email protected]

Your PDF stays on your device

All PDF-to-speech conversion runs entirely in your browser using PDF.js and the Web Speech API. Your PDF files are never uploaded to our servers. We never see the content of your documents.

What we collect and why

  • Account data (email, name) — stored when you sign in via Google OAuth or magic link. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • Anonymous usage data — a SHA-256 hash of your IP address, page count, and date, used to enforce the free-tier limit. The raw IP address is never stored. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
  • Payment data — processed entirely by Paddle, our Merchant of Record and the seller of record for your purchase. We store only your Paddle customer ID and subscription status; we never handle raw card details. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Cookies and sessions

We use a single secure session cookie to keep you signed in. No tracking or advertising cookies are used. Cloudflare Turnstile (CAPTCHA) may set a short-lived cookie for bot detection — it is GDPR-compliant and privacy-friendly.

Third-party processors

  • Paddle.com Market Ltd — payment processing & Merchant of Record (UK-based, GDPR-compliant)
  • Google OAuth — optional sign-in provider (EU Standard Contractual Clauses apply)
  • Cloudflare — CDN, DDoS protection, Turnstile CAPTCHA (EU–US Data Privacy Framework)

Data retention

Account data is retained as long as your account is active. Anonymous usage records are deleted automatically after 30 days. You can permanently delete your account and all associated data at any time from your dashboard.

Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, rectify, and erase your personal data, receive it in a portable format, object to processing, and restrict processing. You also have the right to lodge a complaint with your national data protection supervisory authority.

Contact

For privacy questions or to exercise your rights, contact us at [email protected]