Privacy Policy

Pierre Kull operates PDFStream AI and is the data controller for the personal data described here. Contact us at support@pdfstream.ai.

• Account data (name, email, login credentials) — to create and secure your account. Legal basis: performance of our contract with you.
• Uploaded documents and extracted data — to provide the extraction, reporting and export features you ask for. Legal basis: performance of contract.
• Usage and processing logs (events, durations, errors, document counts) — to run the service, enforce plan limits, troubleshoot and improve quality. Legal basis: legitimate interests.
• Technical data (IP address in hashed form, device and browser information) — for security, rate limiting and fraud prevention. Legal basis: legitimate interests and legal obligation.
• Support messages — to answer your questions. Legal basis: legitimate interests.

Documents you upload are sent to our AI processing provider to produce the extraction and the report. They are processed to deliver the result to you and are not used to train public models by us.

• Hosting, database, storage and AI processing providers acting as our processors.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, payments, subscription management, tax compliance and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

Where data is transferred outside the UK/EEA we rely on adequacy decisions or standard contractual clauses.

Documents, extracted data and reports are kept until you delete them or close your account. Processing and billing logs are kept for up to 24 months for security, accounting and audit reasons, after which they are deleted or anonymised.

Depending on where you live you may request access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent. Write to support@pdfstream.ai and we will respond within one month. You may also complain to your local data protection authority.

Documents are stored in private storage, reachable only through short-lived signed links tied to your account. Data is encrypted in transit and at rest, access is restricted, and database rules prevent any account from reading another account's documents.

We use essential cookies and local storage to keep you signed in and to run checkout. See our Cookie Policy for details and how to manage them.