Privacy Policy

1. Who we are

WorkflowPDF is a browser-first PDF platform: a visual PDF editor, standalone conversion and organization tools, optional accounts, and paid Pro plans.

Privacy contact: info@valorcy.com. Website: https://www.workflowpdf.com.

2. Scope

This policy covers visitors, guests who use tools without an account, registered users, and Pro subscribers. It does not cover third-party websites or services that we link to but do not control.

3. Your PDF files and local processing

Most PDF editing, conversion, compression, and related processing runs in your browser. File contents you process this way are not uploaded to our servers solely for that processing.

Some features may send limited data to our servers when required for the feature to work—for example, optional cloud save or sync for signed-in users, usage metering, the optional PDF engine rewrite API, URL-to-PDF fetches of public web pages you request, contact form submissions, authentication, and billing.

We do not sell the contents of your PDF files. Do not upload or sync documents you are not allowed to process.

• Guest and free cloud file retention is designed to be short (typically about 24 hours from upload for stored objects subject to retention).
• Pro cloud retention currently follows the same short retention window for stored uploads unless we change product behavior and update this policy.
• Local copies in your browser (for example IndexedDB or local storage used by the editor) remain under your device’s control until you clear them.

4. Information we collect

Depending on how you use the Service, we may collect:

• Account data: name, email address, authentication identifiers, and profile details you provide.
• Billing data: subscription status, plan, and payment-related metadata processed by our payment provider (Polar). We do not store full payment card numbers on our servers.
• Usage and product data: tool runs, task counts, plan limits, feature flags, error and performance signals needed to operate the Service.
• Device and technical data: IP address, browser type, approximate location derived from IP, pages viewed, and similar diagnostics.
• Communications: messages you send via contact forms or email, including any attachments or details you choose to share.
• Cookies and similar technologies: session, preference (such as locale or theme), and analytics cookies as described below.

5. How we use information

We use information to:

• Provide, maintain, and improve the Service and its features.
• Authenticate users, secure accounts, and prevent abuse or fraud.
• Enforce plan limits, process subscriptions, and provide customer support.
• Measure product usage and site performance (including via Google Analytics).
• Communicate service-related notices, security alerts, and (where allowed) product updates.
• Comply with law and enforce our Terms of Service.

6. Legal bases (EEA/UK where applicable)

Where GDPR or UK GDPR applies, we process personal data on bases that may include: performance of a contract (providing the Service you request), legitimate interests (securing and improving the Service, preventing abuse), consent (where we ask for it), and legal obligation.

7. Cookies and analytics

We use cookies and similar technologies for essential functions (sign-in sessions, security, locale preferences) and for analytics.

We use Google Analytics (gtag) to understand aggregate traffic and usage. Google may process data according to its own policies. You can control cookies through your browser settings; blocking some cookies may limit parts of the Service.

8. Service providers and third parties

We use trusted processors to operate the Service, including:

• Supabase — authentication, database, and file storage.
• Polar — subscription checkout and billing portal.
• Google — Analytics; optional Google Drive export when you connect or authorize that feature.
• Hosting and infrastructure providers (for example Vercel) that host the application.

These providers process data only as needed to provide their services to us and are bound by their own terms and privacy practices.

9. When we share information

We do not sell your personal information. We may share information with service providers as above, with advisors under confidentiality, if required by law or legal process, to protect rights and safety, or in connection with a merger, acquisition, or asset transfer (with notice where required).

10. Retention

We keep personal data only as long as needed for the purposes described here: account data while your account is active and for a reasonable period afterward; billing records as required for tax and accounting; stored PDF uploads per the retention windows described above; analytics in aggregate or per provider defaults; and contact messages until resolved and for a reasonable follow-up period.

11. Security

We use industry-standard measures such as encrypted transport (HTTPS), access controls, and provider security features. No method of transmission or storage is 100% secure. You are responsible for protecting your account credentials and the devices you use.

12. International transfers

We and our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses or provider mechanisms) for transfers from the EEA, UK, or Switzerland.

13. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data; object to or restrict certain processing; withdraw consent; and lodge a complaint with a supervisory authority.

To exercise rights, email info@valorcy.com from the address associated with your account when possible. We may need to verify your identity before acting on a request.

14. Children’s privacy

The Service is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will take appropriate steps.

15. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Service after an update means you accept the revised policy, except where applicable law requires additional notice or consent.

16. Contact

Questions about privacy: info@valorcy.com. You can also reach us via the contact page at https://www.workflowpdf.com/contact.