Privacy Policy

1. What we process

• Documents you upload — PDFs are processed securely in isolated temporary storage and deleted after download, or kept for up to 7 days if you choose to unlock the full document. We do not retain, sell, or use your documents for any purpose other than the conversion you requested.
• Email address — collected only when you subscribe to Pro (via Stripe Checkout), request Premium Verification, or contact us. Used for subscription management, receipts, and responses.
• Anonymous first-party cookies — cookies used to enforce the free-tier monthly conversion limit and remember coarse first-touch acquisition fields such as landing path, referrer host, and UTM labels. They do not identify you.
• Upload IP address — kept with a conversion job for up to 8 days, to limit how many anonymous uploads one network can queue and so a later purchase can be matched to a free preview you uploaded. It is deleted with the job.
• Analytics — we use Google Analytics 4 and PostHog to understand aggregate site usage (page views, conversion events). Analytics providers set their own cookies and are subject to their respective privacy practices.

2. Payments

Payments for Pro subscriptions are processed entirely by Stripe. We never see or store your card number. Stripe may transfer payment data across borders as described in its privacy policy.

3. Cookies

We use first-party anonymous cookies for the free-tier usage limit and aggregate funnel attribution, plus third-party cookies from Google Analytics and PostHog for usage statistics. You can disable cookies in your browser; the free-tier limit will then apply per browser session.

4. How long we keep data

Uploaded documents are deleted after download, or kept securely for up to 7 days if you choose to unlock the full document. Email addresses and subscription records are kept only while needed for the subscription relationship, billing, and legal obligations (for example, tax records).

5. Your rights

If you are in the EU/EEA or the UK, you have rights under applicable data-protection law (including the GDPR): access, rectification, erasure, restriction, portability, and objection. You can also lodge a complaint with your data-protection authority.

To exercise any of these rights, email hello@toolkit.bot and we will respond within 30 days.

6. Changes

We may update this policy as the service evolves. Material changes will be posted here with an updated date.