Privacy Policy

1. Who we are

PDFTools is a service operated by ИП AOM, БИН (ИИН) 940905301658, registered at Казахстан, г. Алматы, 10 МКР, дом 7А/1.

2. What we collect

• Account email and password hash (Argon2id).
• Files you upload — only for the duration of processing + 60 minutes.
• Server logs (IP, user-agent, request path) kept 14 days for security and debugging.
• Subscription state (plan, billing reference) kept while you have an active subscription + 3 years for tax records.

3. What we don't collect

• Contents of your files — they are never indexed, scraped, or used to train any model.
• Tracking cookies for advertising. We use one session cookie for login and one CSRF cookie for forms — that's it.
• Phone numbers (we don't ask for them).

4. Where your data lives

Application servers in Almaty (Kazakhstan). File storage on Cloudflare R2 with a 60-minute TTL. No US East ingress.

5. Sharing

We share data with: our payment provider (Plexy/Kaspi/Halyk) for purchase confirmation; our email provider (Postmark) for transactional mail. We do not sell, rent, or trade your data.

6. Your rights

• Request a copy of your account data.
• Request deletion of your account at any time — files purge immediately, billing records remain for 3 years per KZ tax code.
• Object to any processing — write to privacy@pdftools.rexlama.kz.

7. Security

TLS 1.3 in transit, AES-256-GCM encryption at rest on R2, Argon2id password hashing, ClamAV scan on upload, rate limiting on every API endpoint.

8. Contact

Privacy questions: privacy@pdftools.rexlama.kz