Privacy Policy
How QuietPDF handles uploaded files, account data, telemetry, and retention.
This notice explains what data QuietPDF processes, why it is processed, where it is hosted, how long it is retained, and how to contact us about privacy questions.
Who controls the data
Privacy requests should be directed to privacy@quietpdf.com.
QuietPDF acts as the controller for account, billing, support, and product telemetry data, and as a processor or service provider for uploaded document content handled on behalf of users.
What data we process
We process account records, plan and billing state, uploaded and generated files, usage and quota events, support communications, and technical logs required to operate the service.
Guest workflows also rely on HTTP-only session ownership tokens so uploads remain isolated per browser session.
Why we process it
Data is processed to authenticate users, run requested document workflows, enforce ownership and quota rules, deliver outputs, support billing, and investigate incidents.
Optional AI and OCR features process only the data required for those explicitly requested workflows.
Retention and deletion
Temporary uploaded and generated files are scheduled for deletion after 30 minutes unless a feature explicitly requires a different retention path.
Account, billing, and security-relevant records may be retained longer where necessary for service operation, fraud prevention, accounting, or legal obligations.
Cross-border processing and subprocessors
Production hosting is designed around Germany. If you access the service from Turkey or another country outside the hosting region, your data may be processed or stored across borders as required to operate the service.
The current subprocessor list is published separately and should be reviewed together with this notice.
Your rights
Depending on your jurisdiction, you may have rights to request access, correction, deletion, restriction, transfer, or objection to certain processing activities.
Submit requests to privacy@quietpdf.com. We may request additional information to verify the requester before fulfilling the request.