Privacy Policy

This policy explains what data PDFPipe (the "Service") collects, why, and the choices you have. It applies to the website and the API. Questions go to hello@pdfpipe.xyz.

1. Data we collect

Account data: your email address and authentication credentials. Billing data: handled by our payment processor; we store a plan and a customer reference, not your card number. Usage data: API request counts, timestamps, and document metadata needed to meter and secure the Service. Website analytics: privacy-friendly, aggregate page metrics with no cross-site tracking.

2. Document content

The HTML, URLs, and rendered PDFs you send are processed to fulfill your request. Rendered documents are not stored unless you explicitly enable storage, in which case they are kept for the retention window of your plan and then deleted. We do not read, sell, or use your document content to train models.

3. E-invoice validation

Invoices you submit to the e-invoice validator or the validation API are processed in memory for the duration of the request and are not written to disk, logged, or retained. We do not keep a copy of the file, its contents, or the report after the response is returned. Because invoices routinely contain personal data such as names, addresses, contact details, and bank details, this is the deliberate design: the data never comes to rest on our systems.

For the free validator we record the IP address of each request and a daily counter, to enforce the rate limit and prevent abuse. That is the only data retained from a free validation, our lawful basis for it is legitimate interest in keeping the service available, and the counters reset daily.

When you validate through the API with an API key, we act as a processor on your behalf for the invoice content. If you are established in the EEA or the UK and need a data processing agreement, see our data processing agreement or email us to have one countersigned.

4. International transfers

PDFPipe is operated from India, and our infrastructure providers may process data in the European Union, the United States, and elsewhere. Where personal data is transferred out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum where applicable. A copy is available on request. For e-invoice validation specifically, invoice content is processed transiently and is never stored in any jurisdiction.

5. How we use data

To provide and secure the Service, meter usage and bill accurately, prevent abuse and fraud, respond to support requests, and meet legal obligations. We do not sell personal data.

6. Service providers

We share the minimum data necessary with infrastructure, payment, and email providers that process it on our behalf under contract. These providers are not permitted to use your data for their own purposes.

7. Retention

Account and billing records are kept while your account is active and as required by law. Stored documents follow your plan's retention window. You can request deletion of your account and associated personal data at any time.

8. Your rights (GDPR and CCPA)

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to not be discriminated against for exercising these rights. We do not sell personal information. To make a request, email hello@pdfpipe.xyz and we will respond within the timeframe required by law.

9. Cookies

We use only essential cookies for authentication and session handling. Website analytics are aggregate and do not use advertising or cross-site tracking cookies.

10. Security

Data is encrypted in transit. Access to systems is restricted and audited. See our security page for more detail.

11. Changes

We may update this policy and will revise the effective date above. Material changes will be announced through the Service.

12. Contact

PDFPipe, Mumbai, India. hello@pdfpipe.xyz