Privacy Policy

Alexander Vinokurov runs MyPDFDone. This page explains what we collect and why. The short version: we keep your files only as long as needed to process them, and we never sell your data.

Your documents

• Uploaded files and results are stored in a private cloud storage bucket, transferred over HTTPS.
• They are deleted automatically 2 hours after upload, or 24 hours after upload if you bought the file.
• We don't read, analyse, share or train anything on your documents. Our logs never contain file contents.
• Passwords you enter to protect or unlock a PDF are used only for that job and deleted with it.

Account and payment data

• If you sign in with Google we receive your name and email address.
• If you buy without an account we store the email you give us for your receipt.
• Card payments are handled by Creem, our merchant of record. We see the payment status, not your card number.

Cookies and analytics

We set one essential cookie with a random visitor ID so that only you can see your files. If you came from an ad, we can remember which campaign brought you (for example a Google Ads click ID). In the EU/EEA, the UK and Switzerland we ask first and store nothing about the ad unless you press "Allow"; elsewhere we store it unless you opt out. If you then buy, our server reports the purchase to Google Ads (see below). You can change your choice at any time under "Cookie settings" at the bottom of every page; "Don't allow" also deletes the stored ad click. Your choice and language are remembered in your browser only. We don't load analytics, advertising or tracking scripts in your browser.

Who processes your data

We use these service providers. Each one gets only what it needs for its job:

• Railway (Railway Corporation, USA): hosting of the website, database and file storage. Like any web host, it receives your IP address when you open the site.
• Creem (creem.io): payments, as our merchant of record. You enter your card details on Creem's checkout page, not on ours. Creem also handles sales tax and receipts.
• Google (Google Ireland Limited / Google LLC): sign-in with Google, only if you choose it. And Google Ads conversion measurement: if you came from a Google ad and buy, our server sends Google the ad click ID, the purchase value and time.
• Resend (Resend, Inc., USA): sends receipts and account emails to your email address.
• Telegram (Telegram FZ-LLC, UAE): internal payment notifications for our team, which include the buyer's email address.

Fonts and all other files of this site are served from our own server. Your browser doesn't contact Google or any other third party just by opening our pages.

Legal bases

• Processing your files, payments and account: performing our contract with you (GDPR Art. 6(1)(b)).
• Keeping orders and invoices: our legal obligations (Art. 6(1)(c)).
• Security, usage limits, payment notifications and measuring which ads work: our legitimate interests (Art. 6(1)(f)). You can object at any time by writing to support@mypdfdone.com.

Transfers outside the EU

Some providers are located outside the EU/EEA (USA, Ukraine, UAE). Where data goes there, the transfer relies on the safeguards the GDPR allows, such as the EU–US Data Privacy Framework or the Standard Contractual Clauses in the provider's data processing terms.

How long we keep things

• Files: 2 hours (24 hours if purchased).
• Orders and invoices: as long as tax and accounting law requires.
• Account: until you ask us to delete it.

Your rights

You can ask for a copy of your data, a correction, or deletion at any time by writing to support@mypdfdone.com. We'll respond within 30 days. You can also complain to the data protection authority in your country.