Privacy Policy

1. Overview

PDFCheck ("we", "our", or "us") is operated by UAB BusinessPress, a company registered in Lithuania (company code 306879202, Kumelių g. 1-2, LT-44281 Kaunas), which is the data controller for the processing described here. PDFCheck provides PDF analysis, validation, and related tools at pdfcheck.online, via our Chrome browser extension, and in the PDFCheck iPhone app.

This Privacy Policy explains what data we collect, why we collect it, how long we keep it, and the rights you have over your data. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable data protection law.

2. Data We Collect

2.1 Request-only PDF analysis

The metadata checker, validator, AI-signal detector, accessibility checker, signature checker, and comparison tools read uploads from request-scoped temporary storage on our server. They do not copy the original file into long-term application storage. The web platform removes the request upload after processing. Extracted metadata or result records can still be stored as described below, and optional security scanning can contact VirusTotal as described in Sections 2.4 and 9.

2.1a PDF editor (processed in your browser)

The PDF editor at /edit-pdf does not upload your file. Your browser stores the PDF, an automatic draft of your edits and any versions you save in its own IndexedDB storage on your device, and builds the edited copy there. We do not receive the file, its contents or the edits. The editor page asks the browser to block network requests to any host other than pdfcheck.online and our page-view counter. These browser copies are removed after 7 days without changes, when you remove them in the editor, or when you clear this site's data in your browser. Account deletion cannot remove them, because they never reach our servers.

2.2 Tools that store files temporarily

Tools that must create a downloadable or editable result use filesystem storage. Merge, split, password, optimization, metadata editing, PDF highlighter, form builder/filler, font checker, image conversion/extraction, and PDF-to-Markdown workflows can store an input, generated output, rendered page, or working copy. Normal processing removes many inputs sooner; an hourly fallback cleanup attempts to remove files older than 24 hours, including files left by interrupted requests or abandoned sessions.

Most working files are on private application storage. Image converter and image extractor outputs are placed in tokenized public storage so the browser can display or download them. Those output URLs are not listed publicly, but anyone who receives the exact tokenized URL can access the file until cleanup. Do not upload confidential documents unless this handling is suitable for your use.

2.3 AI Chat and OCR

PDF AI Chat stores the original PDF in private application storage together with extracted text chunks, questions, answers, and annotations so the conversation can continue. Deleting the chat or account removes the related application records and starts file deletion, which may require retries as described in Section 5. If AI/OCR processing is already in flight, deletion cannot recall content already sent to a provider; that provider’s own retention and deletion terms apply.

AI Chat sends the question and relevant extracted PDF excerpts to the configured AI provider: OpenAI, with DeepSeek available as a fallback. For scanned PDFs, AI Chat and PDF-to-Markdown can render up to the configured page limit as images and send those page images to OpenAI for OCR. Provider processing is subject to the provider terms and privacy information linked in Section 9.

2.4 Conditional VirusTotal scanning

Upload security scanning and the user-requested virus-scan feature are configuration-dependent. When VirusTotal is enabled and configured, PDFCheck can send the file's SHA-256 hash to VirusTotal for a reputation lookup. If separate “upload unknown files” processing is enabled and the hash is not known, PDFCheck can also submit the uploaded file itself to VirusTotal. Full-file submission is not required for hash lookup and is controlled independently.

2.5 Analysis Results (Stored)

Metadata checks, validation, AI-signal detection, and PDF comparisons store result records so you can review them later. Stored result data can include:

• Original filename
• File size
• File hash (SHA-256, used to detect duplicate submissions)
• Extracted PDF metadata (title, author, creator application, creation date, modification date, PDF version, page count, etc.)
• Analysis results (validation checks, AI-detection signals, verification status)
• For comparisons, both filenames, file sizes, and the extracted comparison result
• A unique, randomly generated share token for the report link
• Timestamp of the analysis

Report links (/analysis/{token}) are tokenized and shareable when made public or when an authorized view key is included. Guest metadata and comparison results are deleted after 90 days; account-owned results remain until account deletion.

2.6 Guest Usage (No Account Required)

Guest users do not need to register. We assign a pseudonymous session identifier in the pdf-metadata-checker-session cookie to associate usage with the browser and enforce limits. The guest visitor record can contain:

• Session identifier and device fingerprint, where supplied
• Hashed IP address for rate limiting
• IP address, user-agent string, country code, device/browser/platform category, referrer domain, and landing page for operational visitor analytics and abuse investigation
• Daily usage counters, visit count, and activity timestamps

2.7 Registered Accounts

If you create an account, we additionally collect and store:

• Name
• Email address
• Hashed password
• Account creation date and last login date
• API token(s) you generate
• Analysis history associated with your account

2.7a Desktop App Waitlist and PDFCheck Private Quote Requests

If you join the desktop app waitlist, we store your email address, the systems you chose, your site language, the date you joined, and a keyed hash of your IP address used to limit abuse. We use the address only to tell you when the desktop app is available and delete it on request. If you request a PDFCheck Private quote, we store the answers you submit, including your email address, company, team size and hosting preference, to reply to you with a quote.

2.8 Chrome Extension

The PDFCheck Chrome extension sends PDF files to our API (https://pdfcheck.online/api/v1) over HTTPS. The extension stores the following data locally on your device using chrome.storage.local:

• Your optional API token (if you choose to add one)
• Local history of recent analyses (filenames, file sizes, report tokens, timestamps)

The API token is transmitted to PDFCheck when it authenticates an API request. Recent-analysis history stays in local extension storage unless you choose a PDF for analysis, in which case that PDF and request metadata are sent to PDFCheck. The extension does not collect your general browsing history. It only accesses the active page when you explicitly start its PDF-link scan.

2.9 API Usage

Requests to our API can be authenticated with an API token. We record request counts and analysis results needed to enforce limits and provide history. API and MCP uploads use request or short-lived temporary storage; abandoned MCP upload files are covered by the same 24-hour cleanup limit.

2.10 PDFCheck for iPhone

The PDFCheck iPhone app processes PDFs entirely on your device. It does not upload your files to PDFCheck, does not require an account, and does not include analytics, advertising or tracking. We do not receive your files, their contents, or information about how you use the app.

• Files: The app reads a PDF only when you open it and writes a file only when you save or share it. Temporary working copies stay in the app's private storage and are deleted the next time the app starts.
• Recent files: The app remembers recently opened files on your device so you can reopen them. You can clear this list in the app under About.
• Camera and photos: The camera is used only when you scan a document, and photos you choose are converted on your device. The app saves images to your photo library only when you choose to.
• Text recognition: Text recognition uses Apple's on-device Vision framework. No images or text are sent to PDFCheck.

Because the app does not send us files or usage data, we hold no app data to access, correct or delete. Links in the app that open pdfcheck.online in your browser are covered by the rest of this policy.

3. Legal Basis for Processing (GDPR)

4. How We Use Your Data

We use service data to:

• Deliver PDF analysis results to you
• Make shareable report links available
• Maintain your analysis history (for account holders and session users)
• Enforce daily rate limits and prevent abuse
• Send transactional emails (account verification, password reset) to registered users
• Respond to support requests

We do not use uploaded PDFs, extracted PDF contents, private analysis results, account files, Chrome extension data, or support messages to personalize advertising. We do not sell this service data. If advertising is enabled on eligible public pages, Google and its advertising partners may process browser, device, IP address, cookie, and ad-interaction data as described in Sections 7 and 9.

5. Data Retention

Deletion removes the relevant account or chat records from the application and starts removal of associated working files. Physical file removal can take longer if processing is still in progress or a storage operation fails. Failed file deletions are queued for retry; scheduled cleanup also retries eligible temporary files. The retention periods above describe when files become eligible for cleanup, rather than a guarantee of erasure at that exact hour. If a download remains accessible after a deletion request, contact admin@pdfcheck.online with its report or download link.

6. Your Rights

Under the GDPR (and similar applicable laws), you have the following rights regarding your personal data:

To exercise any of these rights, contact us at admin@pdfcheck.online. We will respond within 30 days.

7. Cookies, Advertising, and Your Choices

PDFCheck currently uses the necessary service cookies and browser-local preference/history storage listed below, plus privacy-focused Plausible Analytics. While the essential-only notice is active, Google advertising code and advertising cookies are disabled on every page. Dismissing this notice does not grant advertising consent. The footer’s Privacy and cookie settings control reopens the notice. This privacy page never loads Google advertising code.

Account or server-side data deletion cannot remove these browser-local keys or Chrome extension storage from your device. Clear site data in your browser and clear or uninstall the extension if you also want to remove those local copies.

7.1 Google advertising cookies and identifiers

Google advertising code is currently blocked while the essential-only notice is active. Site verification remains available through the AdSense account meta tag and ads.txt. If AdSense approves the site and advertising is activated, Google and participating third-party vendors may use cookies, web beacons, IP addresses, local storage, or similar identifiers to deliver, measure, limit, and report advertising. Google may use advertising cookies to show personalized ads based on visits to PDFCheck and other websites when your consent and Google settings permit it. Non-personalized ads can still use cookies or local storage for frequency capping, aggregated reporting, fraud prevention, and contextual ad delivery.

Before advertising is enabled where required in the EEA, United Kingdom, and Switzerland, a Google-certified consent management platform must provide the applicable vendor and purpose information, consent and refusal choices, and a working way to change or withdraw consent. Our essential-only notice is not a certified advertising consent platform and does not replace that requirement.

You can review or change Google's ad-personalization settings at Google Ads Settings. You can also learn how Google uses information from sites and apps that use its services. The Privacy and cookie settings control in the footer reopens the essential-only notice. Advertising remains disabled regardless of dismissal. If the control does not open, contact admin@pdfcheck.online. Browser controls can also delete or block cookies, although blocking necessary cookies may affect login, security, or saved-session features.

8. Data Security

• Data submitted through the production website is transmitted using HTTPS
• Passwords are hashed using bcrypt and never stored in plain text
• Rate limiting uses an IP hash; operational visitor and security records can also contain the IP address and user-agent data disclosed in Section 2.6
• Report links use randomly generated tokens — they are not sequential or guessable
• Our infrastructure is hosted on servers with restricted access
• Private working storage is separated from tokenized public image outputs, and scheduled cleanup covers all configured transient paths

If you discover a security vulnerability, please report it responsibly to admin@pdfcheck.online.

9. Third-Party Services

Core PDF parsing and transformation run on PDFCheck infrastructure. The following integrations can receive specific data when you use the related feature:

• Cloudflare Turnstile protects email registration and browser file uploads against automated abuse. Its browser check processes signals such as IP address, browser information, and the page origin. Our server sends the verification token to Cloudflare; this integration does not send your name, email address, password, or uploaded PDF. Turnstile privacy information.
• OpenAI and DeepSeek: AI Chat sends questions and relevant extracted excerpts to the configured provider; OpenAI OCR can receive rendered PDF page images from scanned AI Chat and PDF-to-Markdown workflows. See OpenAI privacy and DeepSeek privacy.
• VirusTotal (Google): when configured, VirusTotal receives a SHA-256 hash for reputation lookup and receives the file only when separate unknown-file submission is enabled. See the VirusTotal privacy policy.
• Stripe: processes checkout, payment, billing, and subscription data. PDFCheck does not receive full card details. See Stripe privacy.
• Google OAuth: processes authentication when you choose Google sign-in. See the Google Privacy Policy.
• Resend: can process account email addresses and message delivery data for transactional email. See Resend privacy.
• Plausible Analytics: served from stats.businesspress.io for aggregate page and product interaction measurement. This implementation does not use advertising cookies or build cross-site advertising profiles.
• Google AdSense: if advertising is enabled, Google and vendors named in the consent interface can process the advertising data described in Section 7. Application route rules and account-side Auto Ads controls are separate safeguards.

Our hosting provider stores and processes application data on our behalf as infrastructure. Provider locations, subprocessors, and retention rules can differ from PDFCheck's own retention schedule; use the linked provider information before submitting sensitive content.

10. International Data Transfers

PDFCheck's hosting and the third-party providers listed above can process data in countries outside your own, including outside the EU/EEA. Where data protection law requires a transfer mechanism, the relevant controller or processor must rely on an adequacy decision, Standard Contractual Clauses, or another lawful safeguard. Provider privacy and subprocessor information describes their current processing locations in more detail.

11. Children's Privacy

Our service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make changes, we update the last updated date at the top of this page. Please review this notice periodically. Where consent is required, a policy update does not replace your consent choice.

13. Privacy Contact

For any questions about this Privacy Policy, to exercise your rights, or to report a concern, contact our privacy team:

We aim to respond to all legitimate data protection requests within 30 days. If your request is complex or you have made multiple requests, we may extend this period by a further two months; we will notify you if this is the case.