Legal
Data Processing Policy
Last updated: June 2026 · PDFFlow, Hyderabad, India
What data PDFFlow processes
PDFFlow operates on a minimal data collection principle consistent with its technical architecture. The site processes two categories of data: (1) document files uploaded to PDF tools -- these are processed entirely locally in your browser and never transmitted to or stored on any PDFFlow server; (2) standard web usage data collected through Google Analytics including pages visited, session duration, geographic location at the city level, device type, browser type, and referring URL. No personally identifying information is collected in web analytics. No document content, file names, or document metadata is collected.
Legal basis for data processing (GDPR)
For visitors from the European Economic Area, PDFFlow processes web analytics data under the legal basis of legitimate interests (Article 6(1)(f) GDPR) -- specifically, the legitimate interest of understanding how the website is used to improve it for all visitors. This interest is balanced against your privacy rights, and the data collected is limited to aggregated, anonymized analytics that carries minimal privacy risk. Advertising data processed by Google AdSense on your device is handled by Google as a separate data controller. You have the right to opt out of personalized advertising through Google's ad settings.
Data retention
Google Analytics data is retained for 13 months from the date of the session. Advertising data handled by Google follows Google's own retention practices described in their privacy policy. Email correspondence sent to our support address is retained for as long as necessary to address the matter and for a reasonable period afterward for reference. PDFFlow does not retain any document files or document data -- none is ever received, so none can be retained.
Your rights
If you are located in the European Economic Area, you have rights under GDPR including the right to access data we hold about you, the right to request correction of inaccurate data, the right to request deletion of your data, the right to object to processing, and the right to data portability. For analytics data specifically: Google Analytics provides anonymized aggregated data that cannot be attributed to specific individuals, which means individual access, correction, and deletion requests cannot be fulfilled for analytics data. For any other data processing concerns, contact support@pdfflow.live.
Cookies and tracking
PDFFlow uses Google Analytics cookies for usage measurement and Google AdSense cookies for advertising. No other tracking mechanisms are used. For detailed information about specific cookies and how to manage them, see our Cookie Policy. For opting out of Google Analytics specifically, Google provides a browser add-on at tools.google.com/dlpage/gaoptout that prevents your data from being included in Google Analytics measurements across all sites.
Contact for data matters
For any questions about data processing, to exercise your rights, or to report a data concern, contact Gaja Raju at support@pdfflow.live. We aim to respond to all data-related inquiries within 5 business days. PDFFlow is operated from Hyderabad, Telangana, India. For complaints relating to GDPR, you may also contact the Data Protection Authority in your EU member state.