Privacy Policy

What this policy covers

All PDF Tools provides a growing catalogue of browser-based PDF utilities—such as conversions, OCR, and document management—delivered through a Next.js frontend that proxies requests to our Cloudflare Worker API. This notice applies to the website, API calls triggered from it, account creation, billing, and related support interactions.

Information we collect

Depending on how you interact with the site we may collect:

• Account details. Email address and OAuth profile data when you sign in;
• Billing data. Stripe processes payment cards and stores your subscription status. We only receive status updates, plan identifiers, and the last four digits of a card;
• Usage and device logs. Request identifiers, IP address, timestamps, browser information, and quota usage to operate the service and prevent abuse;
• Uploaded documents. Files you submit for conversion along with derived metadata (file type, size, processing status). Files are streamed to the Worker, processed, and discarded shortly after the output is delivered.

How we use information

• Provide PDF conversion, previews, and quota tracking;
• Authenticate users and secure accounts;
• Handle subscriptions, invoicing, and payment disputes via Stripe;
• Monitor reliability, detect abuse, and improve the product;
• Meet legal obligations and enforce our Terms of Service.

Sharing and processors

We do not sell your personal information. We rely on a small number of providers who only process data on our behalf:

• Cloudflare (Workers, D1, and analytics) to host the frontend, API gateway, and infrastructure logs;
• Stripe for payments, subscription management, and automated invoicing;
• Authentication and email providers to deliver sign-in flows and support responses.

These processors are bound by data processing agreements and may store data in the United States or other jurisdictions with appropriate safeguards.

Retention and security

• Account profiles and billing records are retained while you keep an account or as required by law.
• Uploaded documents remain accessible only during the conversion session and are routinely deleted within minutes of completion.
• We employ encryption in transit (HTTPS/TLS), access controls, and audit logging inside Cloudflare Workers and D1.

Your rights

If you are located in the EU/EEA, UK, Switzerland, or California you may request access, correction, deletion, restriction of processing, or a copy of your data. We will respond within 30 days wherever feasible. You may also object to marketing emails or revoke consent to optional cookies (when enabled).

Submit requests by emailing support@allpdftools.com. For security purposes we may need to verify your identity or ask you to sign in before fulfilling a request.

International data transfers

Nexus Reach Inc is based in the United States. When you use the service, information may be processed in the U.S. and other countries where our processors operate. We rely on Standard Contractual Clauses or other safeguards recognized by applicable laws to legitimize those transfers.

Contact the controller