Privacy Policy

Who operates PDFRelay

PDFRelay is operated by Jounes De Schrijver, a sole trader (individual, not a company). For any question about this policy or your data, contact support@pdf-relay.com.

Data we collect

• Account data. When you sign up, we collect your email address for passwordless authentication, stored with our database provider, Supabase. Legal basis: performance of the contract with you (account creation and service delivery). We retain account data for as long as your account is active, and for a reasonable period afterward to comply with legal obligations and resolve disputes.
• API usage data. We record usage and quota counters (request counts, timestamps, cache hit/miss status) tied to your API key, to enforce plan limits and provide billing headers. Legal basis: performance of the contract (quota enforcement) and our legitimate interest in rate limiting and analytics. Usage counters are retained per billing cycle.
• Submitted content. HTML and URLs you submit for rendering are processed transiently to produce a PDF. Legal basis: performance of the contract (providing the rendering service). They are not retained beyond a short-TTL render cache, and rendered PDF bytes are not stored.
• IP address. We log IP addresses for rate limiting and abuse prevention, on the basis of our legitimate interest in protecting the service from abuse.

Where we rely on consent for any processing (for example, optional communications), you may withdraw that consent at any time.

Billing data and Paddle

Subscription payments are handled by Paddle.com Market Ltd (“Paddle”), our merchant of record. Paddle processes checkout, billing, VAT/sales tax, and chargebacks, and handles all card data directly. We never store or process your card data ourselves. Paddle acts as an independent data controller for the billing and payment information it collects; see Paddle’s own privacy policy for details.

Supabase as processor

We use Supabase to store account and application data on our behalf, acting as a data processor under our instructions.

Analytics

We use Vercel Analytics and Vercel Speed Insights to understand aggregate site usage and performance. These tools are configured to avoid collecting personally identifiable information.

International data transfers

Our service providers, including Supabase, Vercel, and Paddle, may process your data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards recognised under GDPR, such as the European Commission’s Standard Contractual Clauses (SCCs), to protect your data.

Cookies

We use a strictly necessary session cookie to keep you signed in. We do not use advertising or tracking cookies.

Your rights

If you are located in the European Union, the European Economic Area, or Poland, you have rights under the GDPR and Polish data protection law, including the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact support@pdf-relay.com. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), or with the supervisory authority in your own EU member state.

No sale of data

We do not sell your personal data to third parties.

Contact

Questions about this policy: support@pdf-relay.com.