AI PDF Toolkit Privacy Policy

1. Introduction & Developer Identity

Welcome to AI PDF Toolkit ("AI PDF Toolkit", "the Application", "we", "us", or "our"), a PDF utility and AI document assistant that lets you merge, split, scan, view and convert PDFs, and chat with, summarize, translate and analyse your documents using artificial intelligence. AI PDF Toolkit is developed and maintained by Gree Web Solutions ("Developer", "Company").

Documents can contain highly personal and confidential information. This Privacy Policy explains which features run entirely on your device, what data is sent to our servers when you choose to use AI and conversion features, why the app requests each device permission, how long we keep data, and the rights you have under global privacy laws, including the EU/UK GDPR, the US CCPA/CPRA and India's Digital Personal Data Protection Act, 2023.

2. On-Device vs. AI Cloud Processing

AI PDF Toolkit has two kinds of tools, and they handle your files very differently:

• Files you create or save (merged PDFs, scans, exported notes, DOCX/XLSX results) are stored in the app's private storage on your device and are not synced to any cloud.
• Original files are not stored on our servers. For AI tools we keep only the text extracted from your PDF (see Section 3). Word/Excel conversions are processed in memory and the result is returned to your device without being saved on the server.

3. Information We Collect

A. Account information (only if you create an account)

• Email & password sign-up: your name, email address and password. Passwords are stored only as a salted bcrypt hash; we can never see your actual password.
• Sign in with Google: your Google account ID, name, email address and profile photo URL, shared by Google with your permission.

B. Document data (only when you use AI or conversion tools)

• File name, page count, size and the text extracted from each page of the PDF you selected.
• Search chunks and numerical "embeddings" of that text, generated on our own server so the AI can find relevant passages.
• Your chat questions, AI answers and page citations (AI PDF Chat history), and the results of summaries, notes, reports and translations so you can view or export them again.

C. Usage, feedback & security data

• AI usage counters: the number of AI requests you make each day, to apply the fair-use limit.
• "Report answer" feedback: if you report an AI answer, we store the reason you chose, any details you type, and an excerpt of the reported answer (up to 2,000 characters).
• Session security records: hashed sign-in session tokens with the device user-agent and IP address used to sign in, to keep your account secure and detect stolen sessions.
• Server logs: standard technical request logs (time, route, status, IP address) used for security, abuse prevention and debugging. Authorization tokens are redacted from logs.

D. Data stored only on your device

Your app language, onboarding status, list of saved files and starred files are stored locally on your device. Sign-in tokens are kept in encrypted secure storage (Android Keystore / iOS Keychain).

E. Advertising data (collected by our ad partners)

• Advertising ID (the resettable Android advertising identifier), used to serve, measure and cap the frequency of ads, and to prevent ad fraud.
• Approximate location derived from your IP address (country/city level, never GPS).
• Ad interactions and diagnostics: which ads were shown or tapped, and ad SDK performance data.
• App install source (Google Play install referrer), used to understand how the app was found.

This data is collected directly by the ad networks listed in Section 9. Your documents, document text, AI results and account email are never shared with them.

4. How We Use Information

• To provide the features you request: answer questions, summarize, translate, generate notes and reports, and convert files.
• To create and secure your account, keep you signed in and let you access your own history.
• To apply fair-use limits and protect the service from abuse, fraud and prompt-injection attacks.
• To investigate reported AI answers and improve answer quality and safety.
• To respond to your support requests and legal obligations.
• To show ads that keep the app free, and to measure ads and prevent ad fraud (through our ad partners).

Where GDPR applies, we process data to perform our contract with you (providing the app's features), for our legitimate interests (security, abuse prevention, service improvement), and with your consent where required (for example, Google sign-in).

5. AI Processing & Service Providers

When you use an AI tool, the following happens:

1. Your PDF is sent to our server over HTTPS, where its text is extracted and the file is discarded.
2. The text is split into chunks and indexed on our server, stored in our cloud database.
3. Only the passages needed for your request, together with your question or instruction, are sent to our AI inference provider, Groq, Inc., which runs the language model and returns the result.
4. Before the answer reaches you, our prompt protector checks it for leaked instructions or unsafe output.

These providers act as our service providers/processors and may process data in countries other than your own, including the United States. We rely on their contractual commitments and standard safeguards for such transfers.

6. Data Retention & Deletion

• Document text, search chunks, chat sessions and AI results are automatically and permanently deleted 30 days after the document was uploaded.
• Sign-in sessions expire after 30 days of validity and are then deleted.
• Account information, usage counters and feedback reports are kept until you delete your account.
• Files on your device stay until you delete them in the app or uninstall it.

7. Device Permissions

AI PDF Toolkit requests only the permissions it needs:

8. Security Measures

• All communication between the app and our servers is encrypted with HTTPS/TLS.
• Passwords are hashed with bcrypt; sign-in uses short-lived access tokens and rotating refresh tokens with reuse detection.
• Tokens on your device are kept in encrypted secure storage (Android Keystore / iOS Keychain).
• Every document and result is linked to your account and cannot be accessed by other users.
• Uploads are validated by file type and size (up to 20 MB), and requests are rate-limited.
• A multi-layer prompt protector treats all document text as untrusted, blocks injection attempts and screens AI output.

No method of transmission or storage is 100% secure, but we work hard to protect your information and will notify affected users and authorities of a data breach where required by law.

9. Advertising, Analytics & Data Sharing

AI PDF Toolkit is free and shows ads: banners, native ads inside screens, full-screen interstitial ads, an app-open ad at launch, and optional rewarded ads (for example, watching an ad to export an AI result).

• Your ad choices: ads may be personalised based on your advertising ID. You can opt out of personalised ads, or reset or delete your advertising ID, in Android Settings → Privacy → Ads, and manage Google ad personalisation at adssettings.google.com.
• Your documents are never used for ads: document contents, AI results and your account email are never shared with ad partners.
• No selling of personal data: we do not sell your personal data. Under some US state laws, allowing ad partners to use the advertising ID for personalised ads may count as "sharing"; you can opt out as described above.
• Limited disclosure: apart from the ad partners above, we share data only with the service providers in Section 5, when you choose to share a file with another app, or when required by law or to protect the rights and safety of users and the Company.

10. Children's Privacy

AI PDF Toolkit is intended for a general audience and is not directed at children under 13 (or under the minimum age required in your country, such as 16 in parts of the EEA or 18 for account creation where parental consent is required under India's DPDP Act). We do not knowingly collect personal data from children, and the app's ads are not designed for children.

If you believe a child has created an account or provided personal information, contact us at info@greewebsolutions.com and we will delete it promptly.

11. Your Privacy Rights

Depending on where you live, you have the following rights regarding your personal data:

To exercise any right, email info@greewebsolutions.com from the email address linked to your account. We respond within 30 days (usually much sooner).

12. Third-Party Platform Privacy Policies & Security References

For full transparency, here are the official privacy and security documents of the platforms and services integrated into AI PDF Toolkit:

13. Changes to This Policy

We may update this Privacy Policy as AI PDF Toolkit evolves or laws change. We will update the effective date above and, for material changes, notify you in the app or by email. Continued use of the app after an update means you accept the revised policy.

14. Policy Inquiries & Contact Information

If you have any questions about this Privacy Policy, our AI data processing, or wish to submit a data request, please contact the developer: