This Privacy Notice explains how Afterthought System, LLC ("we", "us") collects, uses, and protects personal data when you use PDFForge (the "Service"). We are the data controller for the personal data described below.
1. Data we collect
- Account data — name, email address, password hash, and authentication identifiers used to create and secure your account.
- Service content — templates you create, JSON payloads you send to the Service, and the PDFs we generate on your behalf.
- Usage and telemetry — API request counts, generation volumes, error logs, and feature usage to operate and improve the Service.
- Device and connection data — IP address, browser type, device identifiers, timestamps, and similar diagnostic information.
- Support communications — messages you send to our support team.
Payment and billing details (card number, billing address, tax IDs) are collected and processed by our payment provider, Paddle, not by us.
2. How we use your data
- Provide, operate, secure, and improve the Service (legitimate interests / contract).
- Create and authenticate your account (contract).
- Process generations and deliver results back to you (contract).
- Detect, prevent, and address fraud, abuse, or security incidents (legitimate interests / legal obligation).
- Respond to support requests (contract / legitimate interests).
- Send service-related notices and, where you've opted in, product updates (consent for marketing).
- Comply with legal obligations (legal obligation).
3. Who we share data with
- Service providers — hosting, database, email, error monitoring, and analytics vendors that process data on our behalf under appropriate contracts.
- Merchant of Record — Paddle handles the sale, subscription management, payments, tax compliance, invoicing, and refunds.
- Professional advisers — legal, accounting, and insurance advisers when needed.
- Authorities — where required by law, court order, or to protect rights, safety, or property.
- Corporate transactions — in connection with a merger, acquisition, or asset sale, subject to standard confidentiality terms.
We don't sell your personal data.
4. International transfers
Your data may be processed in countries other than your own. Where data leaves the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
5. Retention
We keep personal data only as long as needed for the purposes above. Account data is kept while your account is active and for a reasonable period after closure to comply with legal obligations and resolve disputes. Service content is retained according to your plan and may be deleted after account closure. Backups are rotated on a regular schedule.
6. Your rights
Depending on your location, you may have rights to access, rectify, erase, restrict, port, or object to processing of your personal data, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local data protection authority. We aim to respond to rights requests within one month.
7. Security
We use appropriate technical and organisational measures — including encryption in transit, access controls, and monitoring — to protect personal data. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.
8. Cookies
We use strictly necessary cookies to operate the Service (for example, to keep you signed in). We may use a limited number of analytics cookies to understand product usage. You can manage cookies through your browser settings; disabling essential cookies may break parts of the Service.
9. Children
The Service is not directed to children under 16, and we don't knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we'll delete it.
10. Changes
We may update this Notice from time to time. Material changes will be communicated by email or in-app. The "Last updated" date above always reflects the current version.
11. Contact
For privacy questions or to exercise your rights, contact us through the support channel inside your dashboard.