1. Who we are
This policy explains how MyPDFMate (www.mypdfmate.com) handles your files and personal data. MyPDFMate is operated by Abdullah Butt, Pakistan, which is the data controller for the personal data described here.
You can reach us about anything in this policy at [email protected].
2. How your documents are handled
Browser-based tools (25 of 30). These tools process your file inside your web browser using WebAssembly. The file is read from your device into your browser's memory, processed there, and the result is created there. It is never uploaded to MyPDFMate. Each tool page says "Processed in your browser" for these tools.
Server-based tools (5). Word to PDF, PowerPoint to PDF, Excel to PDF, HTML to PDF, PDF to Word need conversion software that cannot run in a browser. When you use one of these:
- your file is uploaded over an encrypted HTTPS connection to temporary storage (Cloudflare R2) and converted by our processing workers;
- the uploaded file and the converted result are deleted automatically within about an hour of the upload, whether the conversion succeeds or fails;
- while the job runs, a short-lived job record holds the file name, file type, tool used and job status so the conversion can be completed and downloaded; it is deleted about an hour after the job finishes;
- uploads are limited to 100 MB.
We never read, share, sell or reuse your documents, and we don't use them to train any software. We don't ask for an account, so documents are never linked to a profile.
3. The limited technical data we process
Running a public website means a small amount of technical information is unavoidable. Here is all of it:
- Connection data:your IP address and browser type are used to deliver pages, enforce rate limits on the server-based tools, and block abuse. They may appear in our hosting providers' security logs for a short time and are not linked to any document.
- Processing logs: our conversion workers log technical events (job ID, tool, file sizes, errors) so we can keep the service running. They do not log file names or document contents.
- Error reports: if something breaks, a technical report (page URL, browser, the error, and a masked replay of the moments before the error, with typed text and media hidden) is sent to Sentry so we can fix it. Sessions without an error are not recorded. Document contents are never included.
- Your preferences: your cookie choice and light/dark theme are stored only in your browser.
We do not run analytics trackers.
4. Legal bases for processing
If you are in the EEA, UK or Switzerland, we rely on these legal bases under the GDPR:
- Providing the tool you asked for (processing a file you submit to a server-based tool): performance of the service you request, Art. 6(1)(b).
- Security, abuse prevention and error reports: our legitimate interest in keeping the service safe and working, Art. 6(1)(f).
- Advertising cookies: your consent, Art. 6(1)(a), which you can withdraw at any time.
6. Third-party services we rely on
The following providers may process the data described above, each under its own privacy policy and data-protection terms:
- Google LLC / Google Ireland Limited — advertising (AdSense), with your consent for personalised ads. Privacy policy.
- Sentry (Functional Software, Inc.) — error monitoring. Privacy policy.
- Cloudflare, Inc. — website delivery and temporary storage for server-based tools (files deleted within about an hour). Privacy policy.
- Upstash, Inc. — short-lived rate-limit counters and job records. Privacy policy.
- Hosting providers (Vercel, Inc. and Amazon Web Services) — serve the website and run the processing workers.
- jsDelivr — a public CDN that delivers the OCR engine and language files to your browser when you use OCR PDF. Your document is not sent to it. Privacy policy.
Some of these providers are based in the United States. Where data leaves the European Economic Area, the United Kingdom or Switzerland, it is protected by recognised transfer mechanisms such as the EU-US Data Privacy Framework or Standard Contractual Clauses.
7. Data retention
- Documents (server-based tools only): deleted automatically within about an hour of upload. Browser-based tools never upload anything.
- Job records: deleted about an hour after the job finishes.
- Connection logs: kept briefly by our hosting providers for security purposes and then discarded.
- Error reports: retained by Sentry for up to 90 days.
- Cookie choice: 12 months in your browser, after which we ask again.
8. Children
MyPDFMate is a general-audience tool and is not directed at children under 13 (or under 16 in the EEA and UK). We do not knowingly collect personal data from children. If you believe a child has sent us personal data, email [email protected] and we will delete it.
9. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to its processing, to withdraw consent at any time, and to complain to your local data-protection authority (in the UK, the Information Commissioner's Office). Residents of California and other US states with privacy laws may opt out of the "sale" or "sharing" of personal information and of targeted advertising by rejecting advertising cookies, using the "Do Not Sell or Share My Personal Information" link in the footer, or enabling Global Privacy Control. We never discriminate against you for exercising your rights.
Because we hold no accounts and delete documents automatically, there is usually nothing for us to retrieve or delete, but we will always respond to a request. Email [email protected] and we will reply within 30 days.
10. Changes to this policy
If we change how we handle files or data, we will update this page and the "Last updated" date above. Significant changes to advertising or cookies will also be reflected in the cookie banner.
11. Contact us
Questions about this policy or your data? Email [email protected], or see our contact page.