Privacy Policy – PDFScanAccess

1. Introduction

PDFScanAccess is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using our service, you consent to the practices described in this policy.

2. Information We Collect

We collect only the information necessary to provide our service:

• Uploaded files: The PDF files you upload for scanning. We do not access, read, or process these files for any purpose other than running the accessibility scan you requested.
• Email address (optional): If you choose to receive your report by email, we collect your email address solely for delivery purposes.
• Payment information: We do not collect or store your payment card details. All payments are processed by PayPal. We only receive transaction metadata (payment confirmation ID, amount, and timestamp) from PayPal.
• Technical data: Basic server logs including IP address, browser type, and request timestamps. These are used for security monitoring and troubleshooting.

3. How We Use Your Information

We use the information we collect solely to:

• Perform the PDF accessibility scan you requested.
• Generate and deliver your scan report.
• Send email notifications if you opt in to email delivery.
• Process payments through our payment provider.
• Maintain service security and prevent abuse.

We do not sell, rent, or share your data with third parties for marketing or advertising purposes.

4. Data Retention

Uploaded files: PDF files are automatically and permanently deleted from our servers 24 hours after scanning. We do not retain copies.

Scan results: Report metadata (issue counts, severity scores, and file names) may be retained for a limited period to allow you to re-download your report. The actual file contents are never retained beyond 24 hours.

Payment records: Transaction metadata is retained as long as necessary for accounting, tax, and legal compliance purposes.

Email addresses: If provided for report delivery, your email address is retained only until the report is successfully sent, unless you explicitly request ongoing communications.

5. Payment Processing

All payments are processed by PayPal. PayPal collects and processes your payment information directly. We never see or store your full card number.

PayPal's use of your personal information is governed by their Privacy Policy. We encourage you to review it.

6. Email Delivery

If you opt to receive your report by email, we use SendGrid to deliver the message and PDF attachment. SendGrid processes your email address solely for delivery purposes.

7. AI-Powered Remediation

Optional AI-powered remediation suggestions may transmit document metadata (page count, issue names, and short text snippets) to a secure third-party API. This feature is disabled by default and is only activated when you explicitly request AI-generated fix suggestions. No full document content or images are transmitted, and no document content is stored by the AI provider.

8. Cookies and Tracking

We do not use tracking cookies or third-party analytics. We may use essential session cookies required for technical operation of the service. These do not track you across the web.

9. Data Security

We implement reasonable technical and organizational measures to protect your data:

• Uploaded files are stored temporarily with restrictive file permissions.
• Files are scanned for malware before processing.
• All data transmission occurs over HTTPS/TLS.
• Files are automatically deleted after 24 hours.

No security system is impenetrable. While we strive to protect your data, we cannot guarantee absolute security.

10. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data, including:

• The right to access the personal data we hold about you.
• The right to request correction of inaccurate data.
• The right to request deletion of your data.
• The right to object to or restrict certain processing.

To exercise these rights, contact us at [email protected]. Because we delete uploaded files after 24 hours and minimize data collection, we may have limited data to provide beyond payment records.

11. Children's Privacy

Our service is not intended for use by children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us and we will delete it.

12. International Users

PDFScanAccess is operated from the United States. If you access the service from outside the United States, your data will be transferred to and processed in the United States. By using the service, you consent to this transfer.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

[email protected]