Privacy Policy

AziPDF by Azillik is dedicated to making document management fast, secure, and completely free. We provide the essential tools you need — like merging, splitting, and converting PDFs — to streamline your workflow without compromising your privacy. Headquartered in Surat, Gujarat, India, we serve users globally with a privacy-first approach built into every decision.

AziPDF is an easy-to-use PDF toolkit designed for speed, simplicity, and strong security. Unlike traditional PDF tools, AziPDF lets you merge, edit, compress, convert, protect, and manage PDF files in seconds with no learning curve. From A to Z, you can do almost everything you need with a PDF, directly in your browser.

This Privacy Policy applies to all AziPDF services — our website, web app, mobile apps, desktop app, and browser extensions. Our services are designed to comply with applicable privacy laws, including the EU GDPR, CCPA/CPRA, Swiss FADP, and India's DPDP Act 2023.

Account & Identity Data (registered users only)

• Email address and chosen display name upon registration
• Password, stored as a one-way bcrypt hash. We cannot view or recover your actual password.
• Profile photo if you register via Google or Apple SSO
• Account creation date and last login timestamp

Usage & Technical Data

• IP address — used for rate limiting and fraud detection only, never for profiling
• Approximate geographic location at country and city level never precise GPS coordinates
• Browser type and version, operating system, device type
• Pages visited, tools accessed, and session duration, collected only as anonymized analytics
• Error logs used for debugging and service reliability. File contents are never included in these logs

What We Do NOT Collect

• File contents, document text, images, or any data inside your PDFs
• Precise GPS or geolocation coordinates
• Biometric data of any kind (e.g., fingerprints, facial recognition data)
• Financial or payment information
• Social media data beyond what SSO provides (name, email, avatar only)
• Behavioral profiles for advertising targeting
• Sensitive categories: health, political views, religious beliefs, ethnicity

We only process your personal data when we have a lawful basis under GDPR and equivalent applicable laws:

We use your personal data only for these specific, documented purposes:

• Service Delivery: Providing browser-based PDF tools, managing accounts, processing results and delivering tool outputs
• Authentication & Security: Verifying your identity, detecting unauthorized access, preventing brute-force and abuse
• Customer Support: Responding to tickets, resolving technical issues, and improving our documentation
• Product Improvement: Analyzing tool usage and performance using aggregated, anonymized data
• Legal Compliance: Responding to lawful government requests and maintaining required records
• Communication: Sending essential emails such as account updates and password resets

This is the most important section of our Privacy Policy. AziPDF is fundamentally different from traditional PDF tools — because everything happens in your browser.

When you use any AziPDF tool, your file is loaded into your browser's memory, processed by JavaScript and WebAssembly running locally on your device, and the result is delivered directly to you as a download — no file data ever leaves your browser.

What happens step by step:

• You select a file — it is read into your browser's local memory only
• Our JavaScript / WebAssembly processing engine runs entirely within your browser tab
• Merge, split, compress, convert, protect — all operations execute locally on your device
• The output file is generated in browser memory and downloaded directly to your device
• When you close the tab or refresh, all file data is cleared from browser memory automatically
• At no point is any file data transmitted to, through, or stored on our servers

Exception — Advanced Electronic Signatures (AES): AES requires minimal server-side interaction for certificate authority validation and creation of the legally required audit trail, as mandated by eIDAS (EU) Regulation 910/2014 and equivalent laws. You will always be clearly informed before any such server interaction occurs.

Every AziPDF tool processes your files locally in your browser. No server uploads, no server storage, no exceptions:

* All tools use 100% browser-side processing — your device does all the work, no server storage or upload of any kind. Advanced electronic signatures are the sole exception, requiring a secure certificate server interaction strictly for legal compliance under eIDAS (EU) and equivalent frameworks.

A small number of vetted infrastructure providers process account and usage data strictly on our behalf, under binding contractual data processing agreements, with no right to use your data for their own purposes:

Depending on your location, you have the following rights regarding your personal data:

To exercise any right, email support@azipdf.com with your name, email address, and specific request. We respond within 5 business days and always within 30 calendar days. Identity verification may be required.

AziPDF is built with banker's-grade security from the ground up — not bolted on as an afterthought. Every architectural decision starts with one question: how do we make it technically impossible for your data to be compromised?

• Browser-side processing: Files never leave your device — the most secure architecture possible for any document tool
• Encryption in transit: TLS 1.3 (256-bit) for all connections — HTTPS enforced everywhere, HSTS enabled
• Encryption at rest: AES-256 for all stored account data
• Browser sandboxing: Your browser's built-in security model provides natural isolation between file processing and all network activity
• Minimal server footprint: Account data only — no file data is ever present on our servers to secure, protect, or potentially expose
• Role-based access control: Engineers only access the infrastructure they need for their specific role
• Regular audits: Third-party penetration testing and vulnerability assessments conducted regularly
• Breach notification: We will notify affected users and relevant authorities within 72 hours of confirming any account data breach, as required by applicable law
• Two-factor authentication: Available and strongly recommended for all registered accounts

Children's Privacy

AziPDF is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately at support@azipdf.com and we will delete it promptly.

International Data Transfers

AziPDF is headquartered in Surat, Gujarat, India. Your account data may be processed on our cloud infrastructure hosted in India and Ireland (AWS). All transfers of personal data outside the EEA are covered by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an equivalent level of protection.

Changes to This Privacy Policy

We review this Privacy Policy at least annually and whenever we make significant changes to our data practices. Material changes will be communicated to registered users via email with at least 14 days' notice before taking effect. The current version is always available at azipdf.com/privacy-policy.

Data Controller & Contact

• Data Controller: AziPDF by Azillik — Surat, Gujarat, India
• All privacy, security, and legal enquiries: support@azipdf.com
• Response time: 5 business days for general queries, 30 calendar days maximum for rights requests