Privacy Policy & Data Protection

1. Commitment to Privacy & Local-First Philosophy

PDF Pro Panel 3 is engineered on a fundamental principle: Privacy-by-Design. We believe your sensitive contracts, financial statements, medical records, legal filings, and personal PDFs belong exclusively to you. Unlike traditional cloud converter services that ingest and inspect your documents, our desktop and mobile applications perform 100% of PDF processing operations strictly on your local hardware.

2. Local On-Device Processing vs. Cloud Web Tools

We maintain two distinct execution environments:

• Local Native Applications (Windows, macOS, Android, iOS): All tools—including Merge, Split, Compress, OCR, Visual PDF Editor, Encrypt, Sign, and Convert—run entirely in your device's local memory (RAM) and local sandbox storage. Zero bytes of your files are ever uploaded or transmitted over the network.
• Web Pro Cloud Platform (app.pdfpropanel.com): For users utilizing our browser-based conversion endpoints, files are transmitted via 256-bit TLS 1.3 encrypted connections directly to isolated ephemeral processing containers. Files are processed immediately and are subject to strict automatic purging.

3. Ephemeral Cloud Storage & Automatic 24-Hour Purge

For any operation performed through the Web Pro cloud servers:

• Your source files and resulting output files are stored exclusively in isolated, encrypted temporary scratch directories.
• All uploaded and processed documents are automatically and permanently deleted within 24 hours of upload.
• You can manually delete any document from your processing queue instantly using the "Purge Now" action button.
• We never create long-term archives, cold backups, or analytics copies of customer document contents.

4. Account, License & Billing Information

To deliver commercial licenses and maintain account services, we collect minimal operational information:

• Account Identification: Email address, name, and encrypted password hash (bcrypt).
• License & Activation Tokens: License keys, plan status, expiration date, and hashed hardware identifiers (anonymized system UUID) to enforce device seat limits.
• Billing & Payment Data: All financial transactions are processed securely through PCI-DSS Level 1 certified processors: Stripe, PayPal, and Square. We never store raw credit card numbers, CVVs, or bank account details on our servers.

5. Zero Third-Party Advertising & No Data Brokering

We never sell, rent, monetize, or trade your personal data, document contents, or usage habits to third parties, advertising networks, or data brokers. There are zero third-party advertising SDKs or tracking pixels embedded in PDF Pro Panel 3.

6. Website & Web App Visit Statistics

To understand which pages and tools people use, we keep our own first-party visit statistics for pdfpropanel.com and app.pdfpropanel.com. They are designed so that they cannot identify you:

• No cookies and no tracking identifiers. Nothing is stored in your browser to recognise you, and no Google Analytics, advertising or social-media pixels are used. These statistics are never shared with third parties.
• No IP addresses stored. To count unique visitors, your IP address and browser user-agent are combined with a random key that exists for a single day and is then permanently deleted. The result is an anonymous code that cannot be traced back to you and cannot link your visits on different days.
• What is recorded: the page visited (without any query string), the name of the website that linked to it, campaign tags in the link (utm_source, utm_medium, utm_campaign), an approximate country derived from your device's time-zone setting, device type, and browser and operating-system family. For the in-browser demo tools and the web tools we also record which tool was used, whether it succeeded, a file-size range and a general error category — never file names or document contents.
• Retention: detailed visit records are deleted after 35 days; after that only aggregated daily totals are kept.
• Opting out: visits are not counted when your browser sends a Global Privacy Control or Do Not Track signal, or after you choose "Decline" on our cookie notice. They are also not counted if your browser blocks our statistics script.
• Server logs: separately, like almost every web server, ours keeps technical access logs that include IP addresses, for security and troubleshooting. They are not used for visit statistics and are deleted after 12 weeks.

7. International Regulatory Compliance

• GDPR & UK DPA: Under the European General Data Protection Regulation, we operate as a Data Controller for account data and a Data Processor for ephemeral cloud files. You maintain the right to access, rectify, or request permanent deletion of your account.
• CCPA / CPRA: California residents have the right to know what personal data is collected and request its deletion. We do not "sell" or "share" personal data as defined by the CCPA.
• Google Play & App Store Data Safety: Our mobile apps strictly comply with Google Play's Data Safety declaration and Apple App Privacy standards.

8. Data Protection Officer & Inquiries

For inquiries regarding this Privacy Policy or to exercise your statutory data protection rights, please contact our Data Protection Officer:
CCI Software Toolkits – Privacy Team
Email: privacy@pdfpropanel.com
Legal Department: legal@pdfpropanel.com