Privacy Policy

When you upload a PDF for AI conversion, the file is sent to our servers for structural analysis. It is processed in memory and deleted immediately after conversion completes. No document content is written to disk, logged, cached, or stored in any database.

Documents you create or edit in the browser-based editor are processed on your device. They do not leave your browser unless you explicitly upload them for AI conversion.

Exported PDFs with embedded source contain your document data encrypted with AES-256-GCM inside the PDF file itself. That data exists only in the file you download — we never receive a copy.

Account data: your email address, a securely hashed password, and your subscription status. We use this only to authenticate you and operate your account.

Payment data: handled by Stripe (see below). We store only a Stripe customer reference and your plan status — never full card numbers, CVVs, or card details.

Usage data: counts of AI conversions and exports, your plan, and timestamps, so we can enforce plan limits and bill accurately. This is metadata about your usage, not the contents of your documents.

Technical logs: IP addresses and request metadata, kept briefly for security and abuse prevention.

Payment processing is handled by Stripe, Inc.We do not store credit card numbers, CVVs, or full card details on our servers. Stripe’s privacy policy governs how your payment information is handled: stripe.com/privacy.

Your documents are not used to train AI models. The AI conversion processes your document and discards it. No document content enters any training pipeline, dataset, or feedback loop.

We use Plausible Analytics for website traffic measurement. Plausible is privacy-focused, cookie-free, and GDPR-compliant by design. It collects no personal data, sets no cookies, and does not fingerprint visitors — we see aggregate page-view counts, not individual users.

ReflowPDF itself uses only essential cookies required for authentication (session cookies). No tracking cookies, no advertising cookies, and no Google Analytics or Facebook Pixel.

We do not sell your data. We share it only with the service providers needed to run ReflowPDF — such as Stripe for payments and our hosting and AI-conversion infrastructure — and only to the extent required to provide the Service. We may also disclose data if required by law or to protect our rights.

Uploaded documents are deleted immediately after AI conversion. Account data is retained while your account is active; if you delete your account, associated personal data is permanently removed within 30 days, except records we must keep for legal, tax, or accounting purposes. Technical logs are retained for 14 days and then deleted.

You can request a copy of the data we hold about you, ask us to correct it, or request deletion of your account and associated data. If you are in the EU/EEA, you have rights under the GDPR (access, rectification, erasure, portability, and objection); the legal basis for processing account data is performance of our contract with you, and the basis for privacy-respecting analytics is legitimate interest. If you are a California resident, you have rights under the CCPA, including the right to know and to delete — and we do not sell personal information. We respond to all requests within 30 days.

We protect your data with encryption in transit (TLS), password hashing, and access controls. Our servers are located in the United States; if you access ReflowPDF from outside the United States, you understand your data is processed there.

ReflowPDF is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy as the Service evolves; material changes will be communicated by email to registered users. For privacy questions, data requests, or concerns, contact INSEAW LLC at hello@reflowpdf.com or by mail at 301 Corday Lane, Greer, SC 29650, United States.