Privacy Policy
Last Updated: 7 October 2026
We respect your privacy and the importance of the information you entrust to us. This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
By accessing or using the Service, you are accepting the policies and practices described in this Privacy Policy. Each time you visit or use the Service, you agree and expressly consent to our collection, use and disclosure of the information that you provide as described in this Privacy Policy. Any capitalized terms not defined herein shall have the meaning as set forth in the Terms of Service.
Please note that this Privacy Policy does not apply to your use of third-party sites, services, or applications you may access through the Service. We encourage you to review the privacy policies of those third parties for more information regarding their privacy practices.
1. Information We Collect
We collect information you provide directly to us when using the Service. For example, we collect information when you download our Application, register for our Service, sign up for an account, complete a form, participate in any interactive features of the Service, request customer support, or otherwise communicate with us. The types of information we may collect include, but is not limited to:
- Account information (name, email address)
- Technical information (IP address, browser type)
- Any other information you choose to provide
2. How We Use Information
We use the information we collect to:
Usage Data is collected automatically when using the Service.
Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data. We may associate your device identifiers or phone number with your account. Depending on the nature of your inquiry or activities on the Service, we may also ask for other information relevant to your use of the Service.
We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.
Information from Third-Party Social Media Services
The Company allows You to create an account and log in to use the Service through the following Third-party Social Media Services:
If You decide to register through or otherwise grant us access to a Third-Party Social Media Service, We may collect Personal data that is already associated with Your Third-Party Social Media Service's account, namely Your name, email address and profile picture. We do not access Your contacts or other data in Your account. See Section 6 for how We handle data received from Google.
You may also have the option of sharing additional information with the Company through Your Third-Party Social Media Service's account. If You choose to provide such information and Personal Data, during registration or otherwise, You are giving the Company permission to use, share, and store it in a manner consistent with this Privacy Policy.
3. Data Protection
We work hard to protect your information and take appropriate commercially reasonable physical, electronic, and other security measures to help safeguard personal information from loss, unauthorized access, alteration, or disclosure regardless of how or where it is stored. The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.
Detailed Information on the Processing of Your Personal Data
The Service Providers We use may have access to Your Personal Data. These third-party vendors collect, store, use, process and transfer information about Your activity on Our Service in accordance with their Privacy Policies.
4. Analytics
We may use third-party Service providers to monitor and analyze the use of our Service. These entities may use cookies, web beacons, and other technologies to collect information about your use of the Services, including your IP address, web browser, pages viewed, time spent on pages, links clicked, and conversion information. We and others may use this information to, among other things, analyze and track data, determine the popularity of certain content, personalize the user experience, and better understand your activity.
Google Analytics™
Google Analytics™ is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.
You may opt-out of certain Google Analytics™ features through your mobile device settings, such as your device advertising settings or by following the instructions provided by Google in their Privacy Policy:
For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page:
Email communications
We send two kinds of email. Essential account emails (for example your welcome message, plan changes, API key and license notices, and security messages) are necessary to provide the Service and are always sent. Onboarding guides, tips and product and feature updates from our founder are optional: you can switch them off with the checkbox shown when you create an account, in Profile → Notifications at any time, or with the unsubscribe link in every such email. In countries where the GDPR or similar laws apply we show this checkbox at signup, and we send these emails on the basis of our legitimate interest in helping you use the Service, or on your consent where local law requires it.
We send email through Listmonk, a self-hosted mailing system operated by us. Your email address, name and your choice are kept with your account and in that system until you delete your account. We detect your country from the IP address of your request only to decide whether to show the checkbox.
5. Documents You Redact
When you open a PDF in the PDF Redaction web editor, whether from your computer, Google Drive™ or Dropbox:
- The document is processed in your browser. Rendering, OCR and creation of the redacted PDF happen on your device. The file is kept in your browser's local storage (IndexedDB) so you can keep working on it.
- AI detection. In Cloud mode (the default), the text extracted from each page, with word positions, is sent to our detection service to find personal data. It is processed only to return the detected items and is not stored (zero data retention). In Local mode, detection runs on your device and no document text is sent.
- Document metadata. We record the file name, file size and number of pages to operate the Service and measure usage.
- Server storage only when needed. The web editor does not upload the document itself. A document is stored on our servers only if you choose to save it to your account (for example in Redaction Studio) or, for signed-in users, if your browser cannot store it locally. You can delete stored documents at any time or ask us to delete them.
6. Google User Data
This section explains how PDF Redaction accesses, uses, stores and shares data received from Google ("Google user data") when you sign in with Google or use our Google Drive™ app, "Redact PDF by PDF Redaction".
Data we access
- Google sign-in: your name, email address and profile picture, used to create and identify your account.
- Google Drive™: only the PDF files you choose to open with our app, either with Open with → Redact PDF by PDF Redaction in Google Drive™ or by selecting a file in the Google Picker™ on our website. We use Google's
drive.filepermission, which gives us no access to any other files in your Google Drive™. For each file you open we read its name, type and content. We never create, modify or delete files in your Google Drive™. - Google Drive™ app installation: the
drive.installpermission only lets Google Drive™ show our app in its Open with menu. It gives us no access to your files.
How we use Google user data
We use Google Drive™ files only to provide the redaction feature you request. The file is downloaded directly from Google into your browser and handled as described in Section 5. Access tokens issued by Google are kept only in your browser's memory, are never stored on our servers and expire automatically, usually within one hour.
Storage and retention
The content of your Google Drive™ files is not stored on our servers, except in the cases described in Section 5. The copy in your browser stays there until you open another document or clear your browser data. File metadata (name, size, page count) is kept with your account while it is active and is deleted when you delete your account.
Sharing
We do not sell Google user data. We share it only (a) with service providers that process it on our behalf to run the Service, such as hosting and our AI detection service, under confidentiality and data protection obligations; (b) when required by law; or (c) with your explicit consent. We do not use Google user data for advertising, and we do not use it to develop, improve or train generalized AI or machine-learning models.
Limited Use
PDF Redaction's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Revoking access and deleting your data
You can revoke our access to your Google account at any time at myaccount.google.com/connections, and remove our app in Google Drive™ under Settings → Manage apps. To delete your account and the data associated with it, contact us at support@pdf-redaction.com.
7. Dropbox
You can open a PDF from Dropbox using the Dropbox Chooser on our website. You sign in to Dropbox and choose a file in a Dropbox window. We never see your Dropbox password and receive no access token. Dropbox gives our page only the file you chose: its name, size, identifier and a temporary download link that expires after four hours. Your browser downloads the file directly from Dropbox and handles it as described in Section 5. We have no access to any other files in your Dropbox, and we never create, modify or delete files there. For Dropbox's privacy practices, see dropbox.com/privacy.
For questions, contact us at support@pdf-redaction.com
Ready to protect your documents? Redact PDF files now to securely remove sensitive data before sharing.