Privacy Policy
Last updated: March 7, 2026
Privacy by architecture
All PDF processing happens entirely in your browser. Your files are never uploaded to our servers. We cannot see, access, or store your documents. This is verifiable โ open your browser's Network tab and confirm zero file uploads.
1. Who We Are
This website is operated by VR.CONSULTING Sp. z o.o., a company registered in Poland.
VR.CONSULTING Sp. z o.o.
ul. Nowogrodzka 50 / 515
00-695 Warsaw, Poland
NIP: 7011030959
Throughout this policy, "we", "us", and "our" refer to VR.CONSULTING Sp. z o.o.
2. What Data We Collect
We collect a minimal amount of personal data:
| Data | Source | Purpose |
|---|---|---|
| Email address | Google sign-in | Account identification |
| Subscription status | Paddle + our database | Plan management, usage limits |
| IP address | Automatic (server logs) | Security, abuse prevention |
| Device/browser info | Analytics (automatic) | Site improvement, bug fixing |
| Usage patterns | Analytics (automatic) | Understanding which tools are popular |
We do not collect: names, addresses, phone numbers, payment card details (handled entirely by Paddle), or any content from your PDF files.
3. How Your Files Are Processed
Your PDF files never leave your device. All editing, converting, merging, signing, and other operations are performed locally in your web browser using client-side JavaScript (WebAssembly and Canvas APIs).
- No files are uploaded to any server
- No file content is transmitted over the network
- No copies or backups of your files are created by us
- We have zero access to your document content
- We do not use your files to train AI models or for any other purpose
You can verify this yourself: open your browser's Developer Tools (F12), switch to the Network tab, and use any tool. You will see zero file upload requests.
4. Font Processing
Our PDF conversion tools process fonts embedded within your uploaded documents solely for the purpose of format conversion. We do not download, store, redistribute, or license any fonts. If your document contains proprietary fonts, it is your responsibility to ensure you have the appropriate license for those fonts.
We only use the font data already present in your uploaded file to produce an accurate conversion. Font data is processed entirely in your browser and is never transmitted to our servers.
5. How We Use Your Data
We use the data we collect for these purposes only:
- Account authentication โ to identify you when you sign in (via Google OAuth)
- Subscription management โ to determine your plan status and enforce usage limits
- Payment processing โ to manage billing through Paddle (we never see your card details)
- Error monitoring โ to detect and fix application bugs (via Sentry)
- Usage analytics โ to understand how the site is used and improve it (via Google Analytics 4 through Google Tag Manager, only with your consent)
We do not sell, rent, or share your personal data with third parties for marketing purposes.
6. Third-Party Services
We use the following third-party services that may process some of your data:
| Service | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Authentication & database | Email, subscription status | EU |
| Paddle | Payment processing | Payment info (handled by Paddle directly) | US (UK/EU (MoR)) |
| Google (OAuth) | Sign-in | Email, profile name | US (SCCs) |
| Google Analytics | Usage analytics | IP (anonymized), page views, device info | US (SCCs) |
| Vercel | Hosting & analytics | IP, page views | US (SCCs) + EU edge |
| Sentry | Error tracking | Browser info, error details (no file content) | US (SCCs) |
Each service processes data in accordance with their own privacy policy. Where data is transferred outside the EU/EEA, appropriate safeguards (Standard Contractual Clauses) are in place.
7. Cookies & Local Storage
We use the following types of browser storage:
| Type | Examples | Duration | Required |
|---|---|---|---|
| Essential | Auth session, CSRF protection | Session / 30 days | Yes |
| Preferences | Theme (dark/light), language, signature color | Persistent | No |
| Analytics | Google Analytics (_ga, _gid), Vercel Analytics | Up to 2 years | No |
| Local storage | My Files (IndexedDB), daily usage counter | Until cleared | No |
You can control cookies through your browser settings. Disabling essential cookies may prevent authentication and subscription features from working.
Your saved PDF files in "My Files" are stored exclusively in your browser's local storage (IndexedDB). They are never sent to our servers.
8. Data Retention
- Account data (email, subscription status) โ retained while your account is active, deleted upon account deletion request
- Payment records โ retained as required by tax and accounting law (typically 5-7 years depending on jurisdiction)
- Analytics data โ aggregated and anonymized, retained per Google Analytics and Vercel Analytics default policies
- Error logs โ retained for 30 days in Sentry, then automatically deleted
- Your files โ never stored by us. Files in "My Files" exist only in your browser and are deleted when you clear browser data
9. Your Rights Under GDPR (EU/EEA)
If you are in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation:
- Access โ request a copy of all personal data we hold about you
- Rectification โ correct any inaccurate data
- Erasure โ request deletion of your data ("right to be forgotten")
- Restrict processing โ limit how we use your data
- Data portability โ receive your data in a structured, machine-readable format
- Object โ object to processing based on legitimate interests
- Withdraw consent โ at any time, without affecting prior processing
To exercise any of these rights, contact us at support@goeasypdf.com. We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection authority. In Poland, this is the UODO (Urzฤ d Ochrony Danych Osobowych).
10. Your Rights Under CCPA (California)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know โ what personal information we collect and how it is used
- Right to delete โ request deletion of your personal information
- Right to opt-out โ of the sale of personal information
- Right to non-discrimination โ for exercising your privacy rights
We do not sell your personal information. We do not share personal information with third parties for their direct marketing purposes.
11. International Users
Our services are available worldwide. Regardless of where you are located, we apply the same privacy protections to all users. Your data is processed in the EU (via Vercel's European infrastructure and Supabase) and may be processed in the United States by our third-party analytics and error tracking providers under Standard Contractual Clauses.
If you are in Brazil, you have rights under the LGPD similar to those listed in the GDPR section above. If you are in the UK, you are protected by the UK GDPR. Contact us to exercise any rights applicable in your jurisdiction.
12. Children's Privacy
Our service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
13. Security
We protect your data through:
- HTTPS/TLS encryption for all connections
- OAuth 2.0 for authentication (no passwords stored)
- Paddle PCI-DSS Level 1 compliance for payment processing
- Browser-only file processing (your files never transit our infrastructure)
- Minimal data collection (we only store what is strictly necessary)
14. Changes to This Policy
We may update this privacy policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.
15. Contact Us
For privacy-related questions or to exercise your rights:
VR.CONSULTING Sp. z o.o.
ul. Nowogrodzka 50 / 515
00-695 Warsaw, Poland
NIP: 7011030959
Email: support@goeasypdf.com
We aim to respond to all privacy inquiries within 30 days.
ยฉ 2026 VR.CONSULTING Sp. z o.o. All rights reserved.