Privacy Policy
Last updated: 2 September 2026
1. Who we are
This Privacy Policy explains how Pordix Limited ("Pordix", "we", "us", or "our") collects and uses personal data when you use PointPDF (the "Service"). Pordix Limited is a company registered in England and Wales (company number 17089188), with its registered office at 187 Lancing Road, Sheffield, England, S2 4EW. For the purposes of UK data protection law, including the UK GDPR and the Data Protection Act 2018, Pordix Limited is the data controller. You can contact us about privacy at support@pointpdf.com.
2. The personal data we collect
We collect: (a) account data — your name, username, email address, and password (passwords are stored in hashed form by our backend); (b) sign-in data — if you use Google sign-in, the identity information Google provides to authenticate you; (c) profile data — an optional profile image and preferences; (d) billing data — subscription and payment records; card details are handled by Stripe and are not stored by us; (e) document data — files you upload for redaction or conversion, and their processed results; (f) usage data — API keys you create, API and feature usage, and records needed to operate your Plan; and (g) technical data — information stored in your browser (see "Cookies and local storage").
3. How we use your data and our lawful bases
We use your personal data to: provide and operate the Service (performance of a contract); process payments and manage subscriptions (performance of a contract); send service and verification emails (performance of a contract and our legitimate interests); secure, maintain, and improve the Service and prevent misuse (legitimate interests); and comply with legal obligations. Where we rely on consent (for example, any optional communications), you can withdraw it at any time.
4. Documents you upload
Files you upload are transmitted to and processed by our backend solely to perform the redaction or conversion you request. Uploaded files and their processed results are automatically deleted within 24 hours of processing. Please note that some information about a processing job (such as job identifiers) may be included in page URLs during your session and can therefore appear in your browser history.
5. Third parties and processors
We share personal data only as needed to run the Service, with providers acting on our behalf or as necessary to provide features you use, including: Stripe (payment processing); Google (authentication, where you choose Google sign-in); Contentful (content management for our blog); and our hosting and email-delivery providers. Each of these processes data under its own terms and appropriate agreements. We do not sell your personal data.
6. International transfers
Some of our providers may process personal data outside the United Kingdom. Where they do, we rely on appropriate safeguards, such as UK adequacy regulations or standard contractual clauses, to protect your data.
7. Data retention
We keep account and billing data for as long as your account is active and as required to meet legal, tax, and accounting obligations. Uploaded documents and their results are deleted within 24 hours of processing. When data is no longer needed, we delete or anonymise it.
8. Your rights
Under UK data protection law you have the right to access your personal data; to have inaccurate data corrected; to have your data erased; to restrict or object to certain processing; to data portability; and to withdraw consent where processing is based on consent. To exercise any of these rights, contact support@pointpdf.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we would appreciate the chance to address your concerns first.
10. Security
We take reasonable technical and organisational measures to protect personal data, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Children
The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date and, where appropriate, notify you.
13. Contact us
For any privacy question or request, contact us at support@pointpdf.com, or write to Pordix Limited, 187 Lancing Road, Sheffield, England, S2 4EW.