PDFalot
Start Free

Privacy Notice

Last updated: 22 July 2026

1. Who we are

This Privacy Notice describes how PDFALOT Proprietary Limited (trading as "PDFalot"), a company incorporated in South Africa with registered address Gladstone Drive, Panorama, Durban 4125 ("we", "us", "our"), collects and processes personal data in connection with the PDFalot website and services at pdfalot.com (the "Service").

PDFalot is the data controller of personal data described in this notice, except where our payments reseller Paddle acts as an independent controller for payment, billing, tax, and fraud-prevention purposes.

2. Personal data we collect

  • Account data: name, email address, hashed password, authentication provider (e.g. Google), account creation date.
  • Profile data: display name, preferences and settings you provide.
  • Usage data: tools used, number of documents processed, feature interactions, subscription tier, session timestamps.
  • Support data: messages, feedback and attachments you send us.
  • Device and log data: IP address, browser type, operating system, device identifiers, referring pages, error logs.
  • Document content (transient): PDFs and text you upload for AI features are processed to generate responses; we do not retain document content after your session ends unless you explicitly save it.
  • Cookies and similar technologies: see Section 8.

Payment card details are collected and processed by Paddle, not by PDFalot.

3. How we use personal data

  • Create and manage your account and authenticate sign-in.
  • Provide, operate and improve the Service, including AI features.
  • Enforce usage limits (e.g. daily free-tier caps) and subscription entitlements.
  • Respond to support requests and communicate service updates.
  • Detect, prevent and investigate abuse, fraud and security incidents.
  • Comply with legal obligations and enforce our Terms.
  • Send marketing communications where you have consented; you can unsubscribe at any time.

4. Legal bases (GDPR/UK GDPR)

  • Contract: to provide the Service you have signed up for.
  • Legitimate interests: to secure, improve and market the Service in a proportionate way.
  • Consent: for optional cookies and marketing emails; withdrawable at any time.
  • Legal obligation: where processing is required by law (e.g. tax, records).

5. Who we share data with

  • Merchant of Record — Paddle: processes payments, subscriptions, tax compliance, invoicing, and refunds. See paddle.com/legal/privacy.
  • Infrastructure providers: hosting, database, authentication, and email delivery vendors that process data on our behalf under written agreements.
  • AI service providers: AI model providers that process document content strictly to generate the response you requested; content is not used to train their models.
  • Analytics providers: to measure aggregate usage of the Service.
  • Professional advisers: legal, accounting and audit advisers where necessary.
  • Authorities: where required by law, court order, or to protect rights and safety.
  • Corporate transactions: in connection with a merger, acquisition, or sale of assets.

We do not sell personal data.

6. International transfers

Personal data may be transferred to and processed in countries outside South Africa, the UK or the EEA (including the United States) where our providers are based. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to protect your data.

7. Retention

We retain account and subscription data for as long as your account is active and for a reasonable period afterwards to comply with legal, accounting and fraud-prevention requirements. Uploaded document content is processed in memory to serve your request and is not persistently stored by PDFalot unless you explicitly save it. Log and security data are typically retained for up to 12 months. When data is no longer needed, it is deleted or anonymised.

8. Cookies

We use:

  • Essential cookies for authentication, session management and security. These cannot be switched off.
  • Analytics cookies to understand aggregate usage and improve the Service.
  • Marketing/advertising cookies served on ad-supported pages.

You can manage or block cookies through your browser settings. Blocking essential cookies may prevent parts of the Service from working.

9. Your rights

Subject to applicable law (including the South African POPIA, the EU/UK GDPR and other regional laws), you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion ("right to erasure").
  • Restrict or object to certain processing.
  • Data portability.
  • Withdraw consent at any time (without affecting past processing).
  • Lodge a complaint with a supervisory authority — in South Africa, the Information Regulator.

We aim to respond to verified requests within one month. Contact us at privacy@pdfalot.com.

10. Security

We use appropriate technical and organisational measures — including encryption in transit (TLS), access controls, and regular reviews — to protect personal data. No system is perfectly secure; please use a strong, unique password and keep your credentials confidential.

11. Children

The Service is not directed to children under 16 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children.

12. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be notified through the Service or by email. The "Last updated" date at the top shows when the notice was last revised.

13. Contact

PDFALOT Proprietary Limited
Gladstone Drive, Panorama, Durban 4125, South Africa
Email: privacy@pdfalot.com

Try AI Now