๐Ÿ” Privacy & Data Protection

Privacy Policy

Your privacy is not just a feature - it's the foundation of everything we build. At JoyPDF, your files never leave your device.

Last updated: May 29, 2026

100% Client-Side Processing

All PDF operations run entirely in your browser using WebAssembly. No file is ever uploaded to any server.

Zero File Storage

We do not store, cache, or retain any files you process. Once you close the tab, your data is gone.

No Third-Party Access

Your documents are never shared with third parties, advertisers, or AI training datasets.

GDPR & CCPA Compliant

We fully comply with the EU General Data Protection Regulation and the California Consumer Privacy Act.

Introduction & Scope

This Privacy Policy ("Policy") describes how JoyPDF ("we," "us," or "our") collects, uses, and protects information when you use our website at joypdf.app and all related services (collectively, the "Service").

This Policy applies to all visitors, registered users, and any person interacting with our Service, regardless of their geographic location. By using JoyPDF, you acknowledge that you have read and understood this Policy.

JoyPDF is designed from the ground up as a privacy-first platform. Our core architecture processes all PDF operations directly in your browser - your files are never transmitted to our servers.

Data Controller Information

The data controller responsible for your personal data is:

JoyPDF

joypdf.app

Email: privacy@joypdf.app

Website: joypdf.app

Information We Collect

3.1 Information You Provide Directly

When you create an account, we collect your email address, name, and authentication credentials (managed securely by our authentication provider, Clerk). If you contact us, we collect the content of your correspondence.

3.2 Automatically Collected Information

When you visit our website, we may collect limited technical data such as browser type, pages viewed, and approximate timestamps. With your consent, analytics and advertising partners may use cookies or similar identifiers on your device. We do not receive the content of your PDF files through these technologies.

3.3 Information We Do NOT Collect

We do not collect, access, read, store, or process the content of any PDF files or documents you work with using our tools. All file processing occurs exclusively within your browser's local environment. We have no technical ability to access your files.

Legal Basis for Processing (GDPR Art. 6)

We process personal data based on the following legal grounds:

  • Consent (Art. 6(1)(a)): For optional analytics cookies and marketing communications, where applicable.
  • Contract Performance (Art. 6(1)(b)): To provide you with the Service you registered for, including account management.
  • Legitimate Interest (Art. 6(1)(f)): To maintain security, prevent fraud, improve our Service, and ensure system stability.
  • Legal Obligation (Art. 6(1)(c)): To comply with applicable laws and regulations, including tax and accounting requirements.

How We Use Your Information

We use collected information exclusively for the following purposes:

  • Providing, operating, and maintaining the Service
  • Authenticating users and managing accounts
  • Communicating with you regarding updates, changes, or support requests
  • Analyzing aggregated, anonymized usage patterns to improve the Service
  • Ensuring platform security and preventing abuse
  • Complying with legal obligations

We do not use your data for profiling, automated decision-making, or selling to third parties.

Cookies & Tracking Technologies

Cookies are small text files stored in your browser. We group them as follows:

  • Necessary (always active): language preference (JOYPDF_LOCALE), authentication session cookies from Clerk when you sign in. Required for the Service to work.
  • Analytics (optional): help measure how tools are used and improve performance. Loaded only with your consent via our cookie banner.
  • Advertising (optional): allow us and our advertising partners to deliver ads, limit repeat ads, and measure ad performance. Partners may set their own cookies when you consent. We do not use your PDF file content for advertising.

You can accept all, reject optional cookies, or manage categories in the cookie banner. Your PDF files are processed locally in the browser and are never stored in cookies.

Data Sharing & Third Parties

We may share limited data with the following categories of service providers, strictly for operational purposes:

  • Authentication: Clerk (user authentication and session management)
  • Analytics: measurement providers (website usage statistics, with consent)
  • Advertising: ad networks and supply partners (ad delivery and measurement, with consent)
  • Hosting: Render (application hosting)
  • AI Features: When you explicitly use AI-powered tools (e.g., AI Summary, AI Translate), the text content you submit is sent to our AI processing partner. This occurs only upon your explicit action and only the text - never the original file.

We require all third-party providers to maintain equivalent data protection standards. We do not sell, rent, or trade your personal data.

International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs), adequacy decisions by the European Commission, or equivalent binding mechanisms as required under GDPR Chapter V.

Data Retention

Account data is retained for as long as your account is active. If you delete your account, all associated personal data is permanently erased within 30 days. Anonymized analytics data may be retained indefinitely as it cannot be linked to individuals.

Files processed through JoyPDF are never stored on our servers, so there is no file data to retain or delete.

Your Rights (GDPR & International)

Under the GDPR and applicable international privacy laws, you have the following rights:

  • Right of Access (Art. 15): Request a copy of the personal data we hold about you.
  • Right to Rectification (Art. 16): Correct inaccurate or incomplete data.
  • Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
  • Right to Restrict Processing (Art. 18): Limit how we process your data.
  • Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
  • Right to Object (Art. 21): Object to processing based on legitimate interest.
  • Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, contact us at privacy@joypdf.app. We will respond within 30 days.

If you believe your rights have been violated, you have the right to lodge a complaint with the data protection supervisory authority in your country of residence.

Children's Privacy

JoyPDF is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will promptly delete that information. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@joypdf.app.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features. Material changes will be communicated via email or a prominent notice on our website. Your continued use of the Service after such changes constitutes acceptance of the updated Policy.

Contact Us

For any privacy-related questions, requests, or concerns, please contact our Data Protection team:

Email: privacy@joypdf.app

General inquiries: contact@joypdf.app

Service: JoyPDF ยท joypdf.app