Privacy Policy

AziPDF, operated by Azillik, is a free, browser-based document toolkit headquartered in Surat, Gujarat, India. We built AziPDF around a simple idea: you should be able to merge, convert, edit, and secure your PDF files without handing them over to a stranger's server. Wherever technically possible, your files are processed on your own device, inside your own browser, and are never uploaded to us.

This Privacy Policy explains, in plain language, what personal data AziPDF collects, why we collect it, how long we keep it, who we share it with, and the rights you have over it. It applies to our website, web application, and any companion apps or extensions we release under the AziPDF name.

We designed our data practices to align with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act / CPRA, the Swiss Federal Act on Data Protection (FADP), and India's Digital Personal Data Protection Act, 2023 (DPDP Act). If a term in this policy has a specific legal meaning under one of these laws, we intend it to carry that meaning.

By using AziPDF, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please discontinue use of our services.

If a file you process contains personal data about someone else, such as a colleague, client, or family member, you are responsible for having the right to include that data and for making sure that person has been informed of how it will be handled, in the same way you would be if you opened that file locally on your own device. For our client-side tools this rarely raises a concern, since the file never reaches us; it matters most for the AI features and Advanced Electronic Signatures described in the sections below, where content is sent to a server.

Account & Identity Data

Creating an account is optional; every core PDF tool works without one. If you do register, we collect:

• The email address and display name you provide, or that your identity provider shares with us
• Your password, stored only as a one-way bcrypt hash, so we cannot view or recover the original password
• Your profile photo, if supplied by Google or Apple during single sign-on (SSO)
• Account creation date, last login timestamp, and your saved product preferences

Authentication Data

When you sign in with Google or Apple SSO, the identity provider shares only your name, email address, and profile picture with us, never your password on that provider's platform, and never access to your wider Google or Apple account. Session cookies are used to keep you signed in; see our Cookie Policy for details.

Usage & Technical Data

• IP address, used for rate limiting, abuse prevention, and approximate country/city-level location, never precise GPS coordinates
• Browser type and version, operating system, and device type
• Pages visited, tools opened, and session duration, collected as aggregated, anonymized analytics
• Error and diagnostic logs used to fix bugs and keep the service reliable; these never contain your file contents

AI Feature Content: Voice Assistant, Chat PDF, Summarizer & Translate

A small set of AI-powered features work differently from our standard tools because they need to send text to an AI model to generate a response. We explain exactly what that involves in "AI Voice Assistant & AI Features" below. In short, only the specific text needed to answer your request is sent, never your raw file, and voice commands are transcribed to text locally in your browser before anything is sent anywhere.

What We Do Not Collect

• The contents of your PDF files, or any other document, image, or data inside them, for our standard (non-AI) tools
• Precise GPS or device-level geolocation
• Biometric identifiers such as fingerprints or facial-recognition templates
• Payment or billing information of any kind: AziPDF is free, so we have no reason to ask for it
• Social or behavioral profiles built for advertising targeting
• Special-category data: health, political opinions, religious beliefs, or ethnicity

Where GDPR or an equivalent law applies, we only process personal data when we have one of the following lawful bases:

1. Contract performance: to create your account, operate the tools you request, and deliver the results back to you.
2. Legitimate interests: to prevent fraud and abuse, keep our infrastructure secure, and understand aggregated product usage so we can improve AziPDF.
3. Consent: for optional analytics cookies, marketing communications, and any AI feature that requires you to actively opt in or submit a request. Consent can be withdrawn at any time.
4. Legal obligation: where we must respond to a valid court order or comply with applicable law.

If you are in the EU or EEA and want to know which legal basis applies to a specific processing activity, email us at support@azipdf.com and we will confirm it in writing.

We use the personal data described above only for the following documented purposes:

• Service delivery: operating our browser-based PDF tools, running your account, and returning the results you asked for
• Authentication & security: verifying your identity, detecting unauthorized access, and preventing brute-force login attempts or abuse
• Customer support: responding to support tickets and troubleshooting the issue you reported
• Product improvement: analyzing aggregated, anonymized usage patterns to decide what to build or fix next
• Legal compliance: responding to lawful government or court requests and keeping records the law requires us to keep
• Essential communication: account confirmations, password resets, and security notices

We will never sell your personal data. We will never use the content of your files, your AI conversations, or your voice commands to train an AI or machine-learning model, ours or anyone else's. We will never build a behavioral advertising profile from your activity on AziPDF.

This is the section that matters most for your privacy. For the overwhelming majority of AziPDF's tools, your file never leaves the device you are using.

When you open a file in Merge, Split, Compress, Convert, or almost any other AziPDF tool, that file is read into your browser's own memory. JavaScript and WebAssembly running locally on your device do the actual work, and the finished file is handed back to you as a download. It is never sent to our servers in the first place.

What that means in practice

• Your file is read into local browser memory only, not uploaded anywhere
• Processing runs entirely inside your browser tab, using your device's own CPU
• The output file is generated in memory and downloaded straight to your device
• Closing or refreshing the tab clears everything from memory automatically
• At no point does file data pass through, or get stored on, an AziPDF server

Because your files never reach our infrastructure, a data breach at AziPDF, a court order served on us, or an attacker who compromised our servers could not expose your documents; there is nothing stored on our systems to expose.

Exceptions. Two categories of tools need limited server interaction, described in detail below: Advanced Electronic Signatures (AES), which require certificate-authority validation and a legally mandated audit trail under eIDAS (EU) Regulation 910/2014, and our AI-powered features, which need to send text to an AI model to generate a response. You are always told, in the product itself, when either applies.

AziPDF includes a voice assistant ("Azi") and a small number of AI-assisted tools: Chat PDF, AI Summarizer, and Translate PDF. These are the only parts of AziPDF that involve sending any content to a server for AI processing, so we explain them separately and in full detail here.

Azi, the Voice Assistant

When you speak to Azi, your browser's built-in speech-recognition engine converts your voice to text locally, on your device. We do not record or store audio of your voice. Only the resulting text command (for example, "compress this file") is sent to our backend, which forwards it to our AI model provider to work out what you want done and reply in your chosen language.

Azi cannot type your password for you, cannot upload a file on your behalf without your action, and never has access to a file you have not already opened yourself. Where a tool requires a sensitive step, such as entering a password to unlock a PDF, Azi will prompt you to complete that step manually rather than doing it for you.

Chat PDF, AI Summarizer & Translate PDF

These tools extract the relevant text from the document you are working on and send only that text, never the underlying file itself, to our backend, which forwards it to our AI model provider to generate a summary, a translation, or a conversational answer about your document.

Our AI Model Provider

These features are powered by Google's Gemini API. We send the minimum text required to fulfil your specific request, and nothing more. Content submitted through this API is not used by us, or by our provider, to train underlying AI models. We do not persistently store the text of your AI conversations, summaries, or translations beyond what is technically necessary to generate and deliver the response to you.

To make this policy concrete, here is exactly where each category of AziPDF tool does its work:

• 100% in your browser: Merge, Split, Compress, Rotate, Organize, Repair, Edit, Watermark, Number Pages, PDF to PDF/A, Word/Excel/PPT/JPG/PNG/HTML to PDF, Scan to PDF, PDF to Word/Excel/PPT/JPG/PNG, OCR, Protect, Unlock, Redact, Compare, and simple e-signatures. None of these upload your file to us.
• Text sent to our AI provider, file itself never uploaded: Chat PDF, AI Summarizer, Translate PDF, and the Azi voice assistant, as explained above.
• Limited server interaction required by law: Advanced Electronic Signatures (AES), for certificate validation and audit-trail creation only.

If we ever add a tool that changes this balance, we will update this section and highlight the change the next time you use that tool.

• Files: never retained. Files processed by our client-side tools never reach our servers, so there is nothing to retain. Text sent to our AI provider for AI features is used only to generate your response and is not kept afterward.
• Account data: kept for as long as your account remains active. If you delete your account, we remove your account data within 30 days, except where a short additional period is required for fraud prevention or a legal obligation.
• Support tickets: retained for as long as needed to resolve your issue and for a reasonable period afterward in case you follow up, then deleted or anonymized.
• Security & error logs: kept only as long as needed for debugging and abuse prevention, and routinely purged thereafter.

Where we are legally required to retain certain records for longer (for example, in response to a court order), we will do so only for the minimum period the law requires.

A small number of carefully chosen infrastructure providers process account and usage data on our behalf, under contracts that prohibit them from using your data for their own purposes:

• Vercel: hosts our website and web application.
• MongoDB Atlas: stores account data (email, hashed password, preferences) in an encrypted database.
• Google Gemini API: powers Chat PDF, AI Summarizer, Translate PDF, and the Azi voice assistant, as described above.
• Google Analytics: provides aggregated, anonymized usage statistics with IP anonymization enabled.
• Google AdSense: serves non-targeted, contextual ads alongside our tools.
• Gmail SMTP: delivers transactional emails such as confirmations and password resets.
• Google & Apple: provide single sign-on (SSO) when you choose to use it.

We do not permit any of these providers to sell your data, use it for their own advertising, or combine it with other data to build a profile of you.

Google AdSense & Advertising Cookies

We display advertisements via Google AdSense and third-party advertising networks. In accordance with Google Publisher Policies, please note the following:

• Third-party vendors, including Google, use cookies (such as the DoubleClick cookie) to serve ads based on a user's prior visits to AziPDF or other websites on the Internet.
• Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visits to AziPDF and/or other sites across the Internet.
• Users may opt out of personalized advertising at any time by visiting Google Ads Settings ↗.
• Alternatively, you may opt out of a third-party vendor's use of cookies for personalized advertising by visiting aboutads.info ↗ or Your Online Choices ↗.

If your organisation requires a formal Data Processing Agreement (DPA) covering our processing of your account data, contact support@azipdf.com and we will provide one.

Outside of the service providers listed above, we do not sell, rent, or trade your personal data or file contents to anyone. We do not share data with advertisers, data brokers, or analytics companies beyond aggregated, anonymized counts.

Government & Legal Requests

We may disclose limited account data if required by a valid court order or legal obligation under Indian law or an applicable international treaty. Even then, only account metadata such as name and email can realistically be disclosed, since file contents are technically inaccessible to us because they are never uploaded in the first place. Where legally permitted, we will notify affected users before complying with such a request.

Business Transfers

If AziPDF were ever involved in a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction. We would notify users before any such transfer and require the new owner to honor the commitments in this Privacy Policy.

Depending on where you live, you may have the following rights over your personal data:

1. Access: request a copy of the personal data we hold about you, in a portable, machine-readable format.
2. Rectification: ask us to correct inaccurate or incomplete data.
3. Erasure ("right to be forgotten"): request deletion of your account and associated personal data.
4. Portability: receive your data in a structured format suitable for transfer elsewhere.
5. Objection: object to processing based on legitimate interests or direct marketing.
6. Restriction: ask us to pause processing while a dispute is being resolved.
7. Withdraw consent: for anything we process on the basis of your consent, at any time.
8. Lodge a complaint: with your local data protection authority, if you believe we have mishandled your data.

To exercise any of these rights, email support@azipdf.com with your name, the email address on your account, and a description of your request. We respond within 5 business days and complete verified requests within 30 calendar days at the latest. We may ask you to verify your identity first.

Residents of California have additional rights under the CCPA/CPRA, including the right to know what categories of personal information we collect and the right to non-discrimination for exercising your privacy rights. Because we never sell personal data, the CCPA's right to opt out of sale does not require any action on your part.

We designed AziPDF's security around one guiding question: how do we make it technically difficult, not just contractually promised, for your data to be exposed?

• Browser-side processing means files never leave your device for the vast majority of tools: the most defensible architecture there is.
• Encryption in transit: TLS is enforced on every connection to our site, with HSTS enabled.
• Encryption at rest: account data stored in our database is encrypted.
• Minimal server footprint: because we don't store your files, there is far less for an attacker to target in the first place.
• Role-based access control: engineers can only reach the systems their role actually requires.
• Breach notification: if an account-data breach is ever confirmed, we will notify affected users and the relevant authorities within the timeframe applicable law requires.
• Two-factor authentication is available, and we recommend enabling it, for every registered account.

If you discover a security vulnerability, please email support@azipdf.com with full details. We acknowledge reports within 24 hours and, with your consent, will credit you for responsible disclosure.

AziPDF is headquartered in Surat, Gujarat, India, and used by people around the world. Account data may be processed on cloud infrastructure located outside your home country, including in India and the European Union.

Where personal data is transferred out of the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses approved by the European Commission, or an equivalent safeguard, so that your data continues to receive a comparable level of protection wherever it is processed.

AziPDF is not directed at children under the age of 13, and we do not knowingly collect personal data from anyone under that age. If you believe a child has provided us with personal data, please contact us at support@azipdf.com and we will delete it promptly.

Students and minors may still encounter AziPDF in a school or classroom setting, for example when a teacher shares a link to one of our tools. In those cases, use should take place under the supervision of a parent, guardian, or the educational institution, and it is that institution's responsibility to ensure use is age-appropriate and properly supervised.

Changes to This Privacy Policy

We review this Privacy Policy at least once a year, and whenever we make a meaningful change to our data practices. If a change is material, we will notify registered users by email at least 14 days before it takes effect. The current version is always available at this page.

Data Controller & Contact

• Data controller: AziPDF, operated by Azillik, Surat, Gujarat, India
• Privacy, security, and legal enquiries: support@azipdf.com
• Response time: 5 business days for general enquiries, 30 calendar days at the latest for rights requests
• Data Protection Officer: we do not currently have a dedicated external Data Protection Officer, as our processing does not meet the GDPR threshold that requires one; privacy enquiries are handled directly by our team at the contact above