Privacy Policy

This Privacy Policy explains what personal data is collected when you use the website located at pdfkitai.com (the “Website”) and related services (the “Service”), and how such personal data is processed by CLOUD WHALE INTERACTIVE TECHNOLOGY LLC, a Delaware limited liability company with a business address at 300 Delaware Avenue, Suite 210-2207, Wilmington, DE 19801, United States (the “Company,” “we,” “us,” or “our”).

BY USING THE SERVICE, YOU CONFIRM THAT (I) YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY, AND (II) YOU ARE AT LEAST 18 YEARS OLD. If you do not agree with this Privacy Policy, please do not use the Service.

1. Personal Data Controller

CLOUD WHALE INTERACTIVE TECHNOLOGY LLC, a Delaware limited liability company, is the controller of your personal data.

2. Categories of Personal Data We Collect

2.1. Data we receive directly from you

2.1.1. Identifiers: Email address when creating an account, or email and basic profile from Apple or Google SSO.
2.1.2. Account, Authentication, and Device Management Data: Authentication tokens and device identifiers for up to 3 devices. Login sessions remain valid for 1 year.
2.1.3. Purchase Data: Billing data is processed by Airwallex (Apple Pay, Google Pay, bank cards). We receive only secure tokens and purchase history.
2.1.4. Content: Documents you upload are temporarily processed and automatically deleted afterward.
2.1.5. Feedback/Communications: Information from customer support inquiries at support@pdfkitai.com.

2.2. Data we collect automatically

2.2.1. Device and Location Data: Language settings, IP address, time zone, device type, browser type, and operating system.
2.2.2. Usage Data: Pages viewed, features used, purchase history.
2.2.3. Cookies and Tracking Technologies: Used to keep you logged in, analyze traffic, and deliver personalized advertisements.

3. For What Purposes We Process Your Personal Data

3.1. To provide our Service: account management and document processing.
3.2. To manage sessions and enforce the 3-device login limit.
3.3. To process payments via Airwallex.
3.4. To provide customer support.
3.5. To analyze usage via Firebase.
3.6. To serve personalized ads via Google Ads.
3.7. To enforce our Terms and prevent fraud.

4. Legal Bases (EEA-Based Users)

4.1. To perform our contract with you.
4.2. To pursue our legitimate interests (analytics, fraud prevention, targeted ads).
4.3. Based on your consent for cookies and personalized marketing.
4.4. To comply with legal obligations.

5. With Whom We Share Your Personal Data

Service Providers: Cloud infrastructure and payment processor (Airwallex).
Analytics and Marketing Partners: Firebase and Google Ads.
Authentication Partners: Apple and Google (when using SSO).
Law Enforcement: When required by law.
Business Transfers: In the event of a merger, acquisition, or asset sale.

6. U.S. States Privacy Notice

Applicability

If you reside in a state that has enacted consumer privacy laws, this section applies to you. This U.S. States Privacy Notice ("Notice") supplements our Privacy Policy and provides disclosures required by laws in states such as California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia.

This Notice is designed to supplement our Privacy Policy to ensure compliance with state-specific laws and applies to the collection, use, and sharing of your Personal Information through our websites, mobile applications, and other online or offline services (collectively, the "Services").

For California residents, this also serves as our California Notice at Collection.

The definition of "Personal Information" may vary by state law. Generally, it refers to information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

6.1. Categories of Personal Information We Collect and For What Purposes

The table below outlines the categories of Personal Information we collect, along with the purposes of such collection. For more details, refer to Section 3 and Section 5 of this Privacy Policy.

Category	Examples of Personal Information in this Category	Purpose of Collection
Identifiers	Email address.	To provide and maintain our Services, including account creation, authentication, and access management. To serve ads and evaluate their performance. To communicate with users, including customer support, service updates, and promotional offers.
Sensitive Information	Account login credentials allowing access to an account. When we process sensitive personal information (as defined by State Privacy Laws), we do so only for legally permitted purposes and do not use such data to infer characteristics about you.	To provide and maintain our Services, including account creation, authentication, and access management. To secure your account.
Commercial Information	Purchase history, transaction data, content uploaded or processed during your use of the Service (e.g., documents, images, audio, or video files for editing, conversion, watermark removal, or transcription), and any feedback shared during customer support conversations.	To provide and maintain our Services, including file processing, AI image enhancements, and document conversions. To improve user experience through personalized features, recommendations, and service customization. To serve ads and evaluate their performance. To process payments, subscriptions, and transactions. To conduct analytics and research for product development.
Geolocation	Internet protocol (IP) address, country, and/or region.	To provide and maintain our Services, including regional compliance and access management. To improve user experience through personalized content and localized tools.
Internet or other electronic network activity	Information regarding a consumer's interaction with our website, application, or advertisement (Usage Data).	To improve user experience through service customization. To serve ads and evaluate their performance. To process transactions. To conduct analytics for product enhancements.
Inferences	Data and behavioral inferences drawn from the categories above. These inferences are used solely to determine which features you interact with more or less and are not used to deduce specific personal characteristics.	To improve user experience through personalized content and service optimization.

We may also process de-identified data, ensuring it cannot reasonably be linked back to you. We commit to maintaining and using de-identified data responsibly and will not attempt to re-identify such data unless required to validate our de-identification measures.

6.2. What Personal Information We Share

Certain state privacy laws, such as those in California, require us to disclose the categories of Personal Information that we have shared with third parties for business purposes over the past 12 months. During this period, we have disclosed all categories of Personal Information outlined in Section 6.1 for business purposes. For example, we share IP addresses, device identifiers, and authentication details with providers that assist us with cloud infrastructure, authentication, performance monitoring, or payment processing (as detailed in Section 5).

Some U.S. states grant residents the right to opt out of sharing their Personal Information with third parties in exchange for valuable consideration (which may be classified as a "sale" or "share" under state privacy laws, even if no monetary transaction occurs). If you reside in one of these states and would like to limit the disclosure of your Personal Information to third parties for advertising or marketing purposes, please refer to Section 6.4 below.

6.3. Your Privacy Rights Under State Laws

Certain U.S. state privacy laws grant residents specific rights regarding their personal information. If you reside in a state with such laws, you may have the following rights:

Right to Know / Access: You have the right to request access to the specific pieces and categories of personal information we have collected about you in the 12 months preceding your request, including the sources and purposes of collection.
Right to Delete: You have the right to request that we delete the personal information we have collected from you. We will use commercially reasonable efforts to fulfill your request, subject to Section 7 (Data Retention) for legal, auditing, and fraud prevention purposes.
Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out of Sales, Sharing, and Targeted Advertising: You have the right to opt out of the "sale" or "sharing" of your personal information or its use for targeted advertising (see Section 6.4).
Right to Data Portability: You can request a copy of your personal data in a structured, portable, and readily usable format.
Right to Non-Discrimination: You have the right to exercise your privacy rights without receiving discriminatory treatment or pricing variations.
Right to Limit the Use of Sensitive Personal Information: Certain states provide the right to restrict how businesses use sensitive personal information. In order to opt out, please contact us at support@pdfkitai.com with the subject line "Limit the Use of Sensitive Personal Information."

To exercise any of these rights, please submit a request to our customer support team via email:
👉 support@pdfkitai.com

Verification

To ensure that we properly handle your requests, we are required to verify your identity. Depending on the type of request, this verification may include confirming your registered email, date of purchase, device identifier, or other Service-use data that reasonably identifies you as the rightful owner of the account (consistent with Section 2.1.2).

Right to Appeal

If we deny your request, you may have the right to appeal our decision by contacting us. If you remain dissatisfied with the result, you may escalate the matter by contacting the Attorney General's office in your state of residence.

Authorized Agents

Authorized agents acting on behalf of a consumer may submit an opt-out, access, deletion, or correction request by contacting us with valid proof of authorization (such as a valid power of attorney or signed written permission).

6.4. Sales, Sharing, and Targeted Advertising

We do not sell Personal Information for monetary compensation. However, as noted in Section 2.2.3 and Section 3.6, we use Google Ads and tracking technologies to deliver personalized advertisements. Under certain U.S. state laws (such as the CCPA), sharing data with advertising networks for targeted advertising may be interpreted as a "sale" or "sharing" of data, even if no money is exchanged.

We do not knowingly engage in sales, sharing, or targeted advertising using the personal information of individuals under 18.

Category of Personal Information Disclosed	Category of Third-Party Recipient
Identifiers (such as pseudonymous cookie IDs, IP addresses, or tracking tokens).	Advertising networks and analytics providers (such as Google Ads and Firebase).
Internet or other electronic network activity information (such as links you click or features used).	Advertising networks and analytics providers.
Commercial information (such as basic purchase history or subscription tokens).	Advertising networks and integrated payment processors.

Opt-Out Rights

You may opt out of sales, sharing, or targeted advertising by updating your preferences via our "Your Privacy Choices" banner or by contacting us at support@pdfkitai.com. Your opt-out settings apply per device and browser.

7. Data Retention

Authentication Data: Retained to maintain 1-year login state and enforce the 3-device limit.
User Content (Files): Automatically deleted after processing.
Trial Abuse Prevention: Device IDs or hashed emails retained while offers remain available.
Legal & Billing: Payment records retained to comply with legal and accounting obligations.

8. Your Privacy Rights (GDPR & International)

If located in the EEA, UK, or other applicable jurisdictions, you have rights to Access, Correct, Delete, Restrict, or Object to the processing of your personal data. Send requests to support@pdfkitai.com.

9. International Data Transfers

Your data may be transferred and processed internationally. We implement appropriate safeguards such as Standard Contractual Clauses where required.

10. Changes to This Privacy Policy

Material changes will be notified by updating the "Effective as of" date below.

11. Contact Us

📧 support@pdfkitai.com
CLOUD WHALE INTERACTIVE TECHNOLOGY LLC.
300 DELAWARE AVENUE,SUITE 210-2207,WILMINGTON,DE 19801

Effective as of: June 2026