Privacy policy

1Who we are

Dr.PDF is an online document-tools platform run by a freelancer registered with the Saudi Ministry of Human Resources and Social Development, freelance certificate no. FL-814732122, from Jeddah, Saudi Arabia. We follow the Saudi Personal Data Protection Law (PDPL) and its regulations.

2What we collect

• Visit statistics: daily totals by country, device type, system, browser, device language, source and first page; this count keeps no IP address. The site's owner can see accounts' e-mail, country, last device, payments and usage in order to run the service.
• The files you upload for processing, and their results.
• When you sign up: your e-mail address (or your Google account's basic details if you sign in with Google).
• Your points balance, your tool use, and your purchases (invoice number and amount — never card details).
• Your IP address and basic technical data, to prevent abuse and limit requests.
• Usage-step statistics: daily totals for each step (adding a file, starting processing, downloading, reaching a limit that needs payment, opening the payment page), tied to no person, device or IP address, and without file names or content.
• What you choose to send us: suggestions, ratings, and your e-mail if you want a reply.
• Published reviews: we publish your review only if you expressly agree, showing only its text and the name you typed, and you may ask us to remove it at any time.

3Your files and their automatic deletion

• Your files are kept in private cloud storage nobody else can reach; download links are temporary and expire within one minute.
• Uploaded files and their results are deleted automatically after 24 hours, by a cleanup that runs every day — no file stays longer than two days.
• Some tools run entirely in your browser, so the file never reaches our servers.
• We do not look at your files' content, never use them to train any AI model, and never sell or share them for marketing.

4How we use data

• To provide the service: process your files and deliver the result, and keep your points and purchases.
• To protect the service: prevent abuse and fraud.
• To contact you about your account or request. Marketing messages only to those who agreed, and they can opt out at any time.

5Who processes data for us

• Hosting, database and storage: Vercel and Supabase.
• Online payments: Moyasar, which receives card details directly — we never see or store your card details.
• AI tools (summary, translation, extraction, redaction…): the file's text, or the words you write to fill a form, is sent to an AI provider for processing only, and only when you use those tools.
• Alert e-mails: Resend.
• Some of these providers' servers may be outside Saudi Arabia; we choose them with suitable safeguards and share only what the service needs.

6Cookies and local storage

We use your browser's local storage to keep you signed in and to keep your settings (such as the logo and letterhead in templates) on your device. We use no advertising cookies.

7Your rights

• You may know what data we hold about you, access it and get a copy, correct it, ask us to delete it and your account, and withdraw your consent.
• To use any of these rights, write to us from your registered e-mail; we answer within 30 days at most.

8How long we keep data

• Files: two days at most, as above.
• Account, points and purchase records: as long as your account exists, and afterwards what the law requires (such as financial records).

9Children

The service is not meant for anyone under 18 without a guardian's supervision.

10Changes

We may update this policy; the date of the last update is shown at the top. Material changes are announced on the site.