Security & Data Protection
This page describes our comprehensive measures and protocols designed to ensure the confidentiality, integrity and security of your files. Learn about the robust security practices we use to protect your data.
Data Privacy & Security
Discover how we prioritize your privacy. Learn about our approach to data management in this section.
EasyPDF Privacy Policy
We want to be transparent about how we handle your data. Here is a brief overview of our approach:
- Data collection: we only collect information necessary to provide our services.
- Data security: your data is securely stored and protected via HTTPS encryption.
- Data sharing: we do not sell your data to third parties.
- Cookies: we use cookies to improve your experience. Learn more in our full policy.
- Your rights: you have the right to control your data and its use.
For full details, see our Privacy Policy
Security Policy Overview
EasyPDF's security policy focuses on prevention, detection and response to security incidents to protect confidential data and ensure uninterrupted service.
Key Responsibilities
Responsibilities include resource allocation by management, security monitoring, compliance with security measures and incident reporting by all team members.
Key Security Measures
Essential security measures include access control, regular system updates, and critical risk mitigation strategies. EasyPDF also emphasizes data encryption and a continuous improvement plan to maintain information security and resilience.
Ongoing Assessment & Improvement
We manage and protect information security through a continuous improvement plan. We regularly review our policies to ensure their effectiveness and relevance. We also actively seek to improve our information security processes to stay ahead of emerging threats.
Compliance & Standards
Security, privacy and trust as priorities: our compliance with standards and regulations.
GDPR Compliant
As a service operated by a European company, EasyPDF is fully GDPR compliant and ensures absolute respect for data protection. We guarantee your rights including access, rectification and deletion of personal data.
HTTPS Encryption
All communications with EasyPDF are encrypted using the HTTPS protocol (TLS), ensuring the confidentiality and integrity of your data during transit.
Automatic Deletion
All temporary files processed on our platform are automatically and permanently deleted within 24 hours of processing. You retain full control over your data lifecycle.
Product Security
Find details on how we secure and protect user data and document processing.
Cloud Infrastructure
EasyPDF is hosted on Railway, a cloud platform located in the United States (California). Our infrastructure provides a secure and scalable environment to handle user requests efficiently.
Data Encryption
We apply HTTPS (HyperText Transfer Protocol Secure) encryption to protect your data in transit. This encryption ensures the confidentiality and integrity of your data when using our services.
Retention & Deletion
Temporary files (not saved by the user) are automatically and permanently deleted within 24 hours of processing. Saved documents for Pro users are retained for the duration of their subscription. We also offer manual file deletion from the download screen.
User Authentication
EasyPDF offers secure authentication via email/password or Google OAuth (Sign in with Google). Passwords are securely hashed and never stored in plain text.
Payment Security (Stripe)
For secure transactions, EasyPDF uses Stripe, a trusted and reputable payment gateway. Stripe is certified as a PCI Level 1 service provider. We do not collect or store any payment information.
Network & CDN
We rely on Railway's built-in networking and CDN capabilities, ensuring fast global access and solid protection against online threats including DDoS attacks.
Third-Party Providers
We work with trusted partners to deliver our services. Here is an overview of our sub-processors and their roles.
Cloud hosting platform (US, California). Hosts our backend servers and databases. Provides infrastructure security, automatic scaling and network protection.
Secure payment processing. PCI Level 1 certified. Handles all payment data — we never see or store your card details.
Powers our AI Studio features (document summarization, translation, chat). Document content sent to OpenAI is processed according to their enterprise data policy and is not used to train models.
Used for advanced PDF processing operations. Documents are processed according to Adobe's enterprise data handling policies.
Provides 'Sign in with Google' authentication. We only receive your email address and display name — Google does not share your password with us.
Used for visitor counting and usage statistics only. No personal document data is shared with Google Analytics. Compliant with our cookie consent mechanism.
International Data Transfers
Some of our sub-processors are located in the United States. These transfers are governed by appropriate safeguards (Standard Contractual Clauses) in compliance with GDPR. We ensure that all partners maintain a level of data protection equivalent to European standards.
Your Rights
Under the GDPR, you have the following rights over your personal data:
- Right of access: obtain confirmation of the processing and a copy of your data.
- Right of rectification: request correction of inaccurate or incomplete data.
- Right of erasure: request the deletion of your personal data.
- Right to restriction: request restriction of processing under certain conditions.
- Right to data portability: receive your data in a structured, machine-readable format.
- Right to object: object to processing based on legitimate interests.
- Right to withdraw consent: withdraw your consent at any time.
To exercise any of these rights, contact us at: [email protected]