Privacy Policy

PDFized.com is operated by Nazax LP, a limited partnership registered in Scotland (No. SL029985) ("PDFized", "we", "our", or "us"), 39/5 Granton Crescent, Edinburgh, EH5 1BN, United Kingdom — an AI-powered tool that helps you redact sensitive content from PDF documents.

We are committed to protecting your privacy and handling your data responsibly. This page summarises how we collect, use, and protect your personal information.

Our complete privacy practices — including what data we store, how long we retain it, who we share it with, your legal rights, and how to exercise them — are set out in Sections 5, 6, and 7 of our Terms & Conditions. In the event of any conflict between this summary and the Terms & Conditions, the Terms & Conditions prevail.

When you use PDFized, we collect and store:

• Document data: uploaded PDFs, processed versions, metadata, and AI-generated annotations
• Account data: email, profile information, organisation membership, and subscription details
• Usage data: the service usage and activity records described in Section 3 (uploads, pages processed, storage and processing cost; sign-ins, documents opened and downloaded, time in a document, and country)
• Website analytics: pages viewed and visit details collected by Google Analytics on pdfized.com, where you allow it (Section 4)
• Device and network data: your IP address and browser type when you accept our terms, and in our hosting providers' technical logs
• Processing records: technical logs of automated AI processing runs, retained for debugging, security, and service improvement

For a complete breakdown, see T&C Section 5 — "What We Store".

In the PDFized app we keep two kinds of usage records for signed-in users and invite-link visitors.

Service usage. We record how many documents you upload, how many pages we process, how much storage you use, and an estimate of the processing cost. We need this to provide the service, apply your plan's limits and bill you, so our lawful basis is our contract with you (UK GDPR Art. 6(1)(b)). An objection does not stop these records.

Activity measurement. We record:

• When you sign in or open an invite link
• When you open a document, and how long it stays open
• When you download a document (which document and in what format)
• The country your connection comes from. We do not store your IP address in this record

Our lawful basis is our legitimate interests in running PDFized reliably, keeping it secure, and understanding how it is used so we can improve it (UK GDPR Art. 6(1)(f)).

For both kinds of record: we do not record the contents or names of your documents, your IP address, or your browser or device details. Events are tied to an internal account ID, not your name or email. Because we can link that ID to your account, we treat this data as personal data. It is stored in our own database, seen only by PDFized administrators on an internal dashboard, and never sent to a third-party analytics service. Individual events are deleted after 13 months. Daily per-account summaries are deleted when your account is deleted. Accounts we use for testing and demos are left out of our figures. We do not use this data for advertising or share it with anyone else.

Your right to object to activity measurement. You can object at any time to the activity measurement above by emailing team@pdfized.com. We will review your objection and reply within one month. We will stop using your activity for this measurement unless we have compelling legitimate grounds that override your interests, rights and freedoms. If we do not stop, we will tell you why. You can also ask us separately to delete the activity events we already hold.

Google Analytics. On pdfized.com we use Google Analytics to count visits and see which pages are useful. It records the pages you view, how you arrived (for example, the site that linked to us), your approximate location, and your device type, browser and operating system. Google acts as our processor under its data processing terms. We have turned off Google signals and advertising features, and Google says it does not log or store the IP addresses of UK, EU or Swiss visitors. Data about individual visitors is kept for no more than 14 months. Google may process this data in the United States, relying on the EU-US Data Privacy Framework, its UK Extension (the UK-US "data bridge") and the Swiss-US Data Privacy Framework.

Your choice. In the UK, the EU and EEA, and Switzerland, or when we cannot tell where you are, Google Analytics loads only if you click Accept in the cookie bar. Our lawful basis is your consent. Elsewhere it loads by default. You can change your choice at any time with the Cookie settings link at the bottom of every page. Declining stops Google Analytics and removes its cookies.

Cookies we use:

• _ga and _ga_<ID> (Google Analytics): tell visits apart. They last up to 13 months and are set only if Google Analytics loads
• pz_consent: remembers your cookie choice for 12 months. It is strictly necessary
• The PDFized app uses only strictly necessary cookies: to sign you in, keep your session secure, and remember that you accepted our terms

We use your information to:

• Provide and operate our redaction service
• Process your documents and deliver analysis results
• Maintain your account and manage access
• Monitor security and prevent fraud
• Debug issues and improve service quality
• Understand how the service and our website are used, and measure reliability and growth (Sections 3 and 4)
• Respond to your support requests
• Notify you of material changes to our terms or policies

We process your data on the basis of contract performance, legitimate interest, and legal obligation. See T&C Section 5 — "Lawful Basis for Processing".

PDFized does not sell, rent, or share your personal information for monetary or other valuable consideration. We do not engage in the "sale" or "sharing" of personal information as defined by the California Consumer Privacy Act (CCPA/CPRA) or equivalent US state privacy laws.

Your data is used solely to provide and improve our services.

We rely on third-party infrastructure providers — including Google Cloud Platform and Supabase — acting as data processors under appropriate data processing agreements. On our website, Google provides Google Analytics as our processor (Section 4).

Your data may be processed in data centres outside the United Kingdom, including in the United States. We rely on the UK Extension to the EU-US Data Privacy Framework and International Data Transfer Agreements as safeguards. Full details are in T&C Section 5 — "International Data Transfers".

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to processing.

UK & EU Residents

You have rights under UK GDPR / EU GDPR including access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with the ICO (UK) or your national data protection authority (EU).

Right to object: you can object at any time to processing based on our legitimate interests, including the activity measurement described in Section 3. Email team@pdfized.com. We will reply within one month and stop, unless we have compelling legitimate grounds that override your interests, rights and freedoms. If we do not stop, we will tell you why.

US Residents

You have rights under CCPA/CPRA and equivalent state privacy laws including the right to know, delete, correct, opt-out of sale (we do not sell your data), and non-discrimination.

To exercise any of these rights, contact team@pdfized.com. For the full list of rights and response timeframes, see T&C Section 5 — "Your Rights".

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: team@pdfized.com

Mailing Address: 39/5 Granton Crescent, Edinburgh, Scotland, EH5 1BN, United Kingdom

Data controller: Nazax LP, a limited partnership registered in Scotland (No. SL029985), 39/5 Granton Crescent, Edinburgh, EH5 1BN, United Kingdom.

For the complete legal framework governing your use of PDFized, including data retention, deletion, usage limits, and disclaimers, please refer to our Terms & Conditions.