Privacy Policy

Effective Date: October 9, 2026 | Last Updated: October 9, 2026

At PDFnestor (“we”, “our”, or “us”), we prioritize client document confidentiality, digital transparency, and strict adherence to global privacy laws, including the European Union General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA).

1. Lawful Bases for Processing (GDPR Article 6)

We process your personal information only when authorized by an established legal basis under Article 6 of the GDPR:

• Performance of a Contract (Article 6(1)(b)): Processing your name, contact email, form requirements, and uploaded draft files to design, validate, and deliver contracted interactive PDF forms.
• Legitimate Interests (Article 6(1)(f)): Maintaining server defense mechanisms, rate-limiting form submissions against automated spam, ensuring TLS encryption, and diagnosing service stability.
• Legal Obligation (Article 6(1)(c)): Retaining necessary transaction and accounting references to comply with fiscal and statutory requirements.
• Consent (Article 6(1)(a)): Where you explicitly submit supplementary feedback or request optional updates. You may withdraw consent at any time.

2. Processing Architecture: Free Online PDF Utilities

To maximize document security, PDFnestor operates a two-tiered technical architecture for online PDF tools:

A. Zero-Knowledge Client-Side Processing (Merge, Split, Rotate)

Our primary utility tools (Merge PDF, Split PDF, and Rotate PDF) run 100% locally in your web browser using WebAssembly and client-side JavaScript (pdf-lib). Your files are never transmitted to our web server or any third party. Processing occurs entirely in your device's memory, ensuring absolute data privacy.

B. Ephemeral Cloud Conversion Tools (Office & Image Conversions)

Where format conversion requires server-side document rendering (e.g., PDF to Word, Excel, or PowerPoint), files are transmitted over encrypted TLS 1.3 tunnels to verified API processing partners:

• CloudConvert (Lunaweb GmbH, Germany - EU-Hosted): Files are stored in temporary memory only during processing and permanently deleted within 24 hours. Files are never inspected or retained permanently.
• iLovePDF (iLovePDF S.L., Spain - EU-Hosted): Files are processed in strict confidence and permanently purged within 2 hours of completion.

Neither PDFnestor nor our processing partners ever use your uploaded documents or forms to train machine learning models, build profiles, or distribute to advertisers.

3. Custom Design Services & File Retention Schedule

When you purchase a custom form package or submit documents via our quote forms:

• Restricted Private Upload Storage: Submitted source files (PDFs, Word documents, scanned paper forms) are stored in an isolated directory (pdfnestor-private-uploads) located outside the public web root. Direct HTTP access and web execution are prohibited.
• 30-Day Automated Purge: Working drafts and source materials are retained only during the active project and revision window. All client files are permanently deleted 30 days following final delivery and sign-off.
• Strict Confidentiality: We treat all client business logic, formulas, internal organizational templates, and branding as proprietary and confidential.

4. Payment Processing (Merchant of Record)

All payments are handled by Paddle.com Market Ltd (UK) or Paddle Payments Ireland Ltd (EU), acting as Merchant of Record. PDFnestor never collects, processes, or stores your payment card or banking details.

Paddle securely processes payments under PCI-DSS Level 1 compliance. Paddle provides PDFnestor only with an anonymized transaction identifier (txn_...), package selection, and completion status to facilitate order fulfillment.

5. International Transfers & Safeguards

Where data is processed across international cloud infrastructure, transfers are safeguarded through:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• UK International Data Transfer Addendum (IDTA).
• Full end-to-end encryption in transit (HTTPS / TLS 1.3) and restricted access controls.

6. Your Data Subject Rights (GDPR & CCPA)

As a data subject, you hold comprehensive rights regarding your personal information:

1. Right to Access: Obtain confirmation of whether your data is being processed and receive a copy.
2. Right to Rectification: Rectify inaccurate or incomplete details.
3. Right to Erasure (“Right to be Forgotten”): Request immediate and permanent deletion of your project records and files.
4. Right to Restriction: Request restriction of data processing under certain statutory circumstances.
5. Right to Data Portability: Receive your provided data in a structured, machine-readable format.
6. Right to Object: Object to processing founded upon legitimate interests.
7. Right to Lodge a Complaint: Lodge a complaint with your local EU/EEA supervisory authority or the UK Information Commissioner’s Office (ICO).

To exercise any of these rights, email us at support@pdfnestor.com. Valid requests are verified and resolved within 30 days without fee.

7. Contact Information

For questions or privacy inquiries, contact:

PDFnestor Form Design Studio
Email: support@pdfnestor.com
Website: https://pdfnestor.com