Privacy Policy
You upload documents — sometimes ID documents, marksheets, or other sensitive files — to process them. We try to hold as little of that as possible, for as short a time as possible.
Who is responsible for your data
IndiaPDFTools, a sole proprietorship run by Rahini Rajagopal, N974 Divyasree Republic of Whitefield, EPIP Zone, Whitefield, Bengaluru 560066. Contact: support@indiapdftools.com. Grievance officer: Rahini Rajagopal, gsraja1990@gmail.com.
What we hold, and for how long
| Data | Retention |
|---|---|
| Uploaded files | Removed as soon as your job ends, whether it works or not. When the site is busy and your job waits in line, your file waits on our server until its turn and is removed at the end. If a job is interrupted, a clean-up removes anything left over within a few hours. PDFs you send to run a saved workflow are removed as soon as that run ends. |
| Results | Not stored for later: the result lives in your browser tab, and closing it ends it. The one exception is a job that waited in line: its result is kept so you can come back for it. You can download it again for 30 minutes after the first time, and then it is deleted. A result you never collect is deleted after 6 hours (24 hours if you had a pass). |
| Results of saved-workflow runs | A run you watch to the end is removed once you have downloaded it, or within an hour. A run left to finish in the background, including every run on several PDFs or a ZIP, is kept for 7 days so you can come back to it, or until you delete it sooner. Your results stay downloadable for those 7 days even if your pass ends. |
| Saved workflows | The steps and settings you saved (never a PDF, a thumbnail or a password), kept until you delete them or your account |
| Run records and notifications | The list of your runs (workflow name, counts, state) and the in-app notices about them are kept for 30 days. The names of the files in a run are kept only as long as its result (up to 7 days), then forgotten |
| Account info (email, Google account ID) | Kept until you delete your account |
| Feedback you send | Kept without a time limit: the rating, category and message. We do not collect your name or email for feedback, and if you delete your account the message stays with no link back to you |
| Messages you send through Contact | The message, and the name and email address you typed, are kept in our admin inbox and in the owners' mailboxes until we delete them. Ask us to delete one and we will, within 30 days |
| Payment records (order/pass history) | Kept for around 8 years — Indian bookkeeping requirements outlive an account |
| Payment webhook data | Only IDs, amount, currency and status are kept; the rest is discarded before storage, and this record is purged after 180 days |
| Application logs | Kept on our server only, up to a fixed size (older entries are overwritten), and cleared each time the site is updated. They never contain file contents, passwords, or file names. We keep no web access log. |
| Analytics data (held by Google Analytics) | Kept by Google for 14 months |
| Our record of your analytics choice | Kept for 3 years, under a random ID; not stored with your IP address |
What we never store
- Your original filename — files are renamed internally and downloads are served under a generated name, so a name like a real document's title never ends up in our systems. The one exception is a saved-workflow run, which shows you your own file names (and mirrors the folders of a ZIP) until its result is removed, at most 7 days.
- What you type into a document template (names, addresses, amounts). It is used to make your PDF, and is not written to any log or kept once the document has been made.
- Your card details — payments are handled entirely by Razorpay; we never see or store card numbers.
Deleting your account or your data
You can delete your account yourself: sign in, open My Purchases and choose "Delete my account". It takes effect straight away. If you would rather ask us, write to support@indiapdftools.com from the email you signed in with, or use Contact , and we will handle it within 30 days.
When an account is deleted, your saved workflows, run records, notifications and any results waiting in Results are deleted, your email and Google account ID are scrubbed and the account is anonymised rather than removed outright — payment records tied to it are kept (in anonymised form) because Indian bookkeeping law requires it, even after the account itself is gone. Feedback you sent stays, with no link back to you. A pass that is still running ends with the account (see the Refund & Cancellation page).
A document you are editing, in your browser
Multiple Actions remembers the document you are putting together, so a reload or a closed tab does not lose it. The files and your edits are kept in your own browser's storage on your own device, never sent to us for this, for up to 24 hours. They are cleared when you choose "Start a new document", or you can clear your browser's site data. A password-protected file, and any password you type, are never kept.
Backups
We do not keep database backups at the moment, so there is no older copy of your data anywhere else: when something is deleted, it is deleted. If we start taking backups, we will say so here first, with how long they are kept, and a deletion will then be complete once the backups made before it have expired.
Who else sees your data
Razorpay processes payments — order IDs, amounts, and status pass through them; we never handle your card or bank details directly.
Google (Gmail) delivers the email we receive when you use Contact : the text of your message and the name and email address you typed pass through Google's mail service to the site owners, and copies stay in their mailboxes until they delete them. The message is also kept in our own admin inbox.
Google handles sign-in — when you sign in, we receive your Google account ID, email address, and whether that email is verified. Nothing beyond that is requested.
Google Analytics measures how the site is used, while you use the site, unless you turn it off. Using the site counts as agreeing to this. It sets two cookies (_ga and _ga_…) holding a random identifier for up to two years. Google receives the pages you view, which tools you use and whether they worked, and your browser and device details, and it processes your IP address to work out your approximate location. It never receives your documents, their filenames, anything you type into a template, your email or your account details. You can block it with your browser or an extension.
Google keeps this data for 14 months. Turning analytics off stops future collection, but doesn't delete what Google has already received.
When you choose OK or Decline on the analytics notice, or change your choice later, we keep a record of that answer: a random ID, the date and the answer, for three years. It shows what was chosen and when we received it, not who chose, and it is not stored with your IP address. The random ID stays on your device and is never sent to Google.
Razorpay and Google sign-in set their own storage in your browser when you pay or sign in. Questions or complaints about any of this — see Contact .
Your choices
Analytics runs while you use the site unless you turn it off. You can turn it off, or back on, at any time here, or with Cookie settings in the footer of any page.
Where your data goes
Razorpay processes payments in India. Google handles sign-in, delivers the email for messages sent through Contact and, if analytics is on, usage statistics, and may process them outside India. Your files are processed on our own server and are never sent to either of them.
Your rights
You can ask what personal data we hold about you (your email, Google account ID and purchase history), ask us to correct it, ask us to delete your account, and complain to our grievance officer. Write to support@indiapdftools.com. We reply within 2 business days. Payment records are kept in anonymised form for about 8 years because Indian bookkeeping rules require it.
Children
Accounts and purchases are for people aged 18 or over, and we do not knowingly create an account for anyone younger. The free tools work without an account.
Security
Files travel over an encrypted connection, are processed in an isolated process and are deleted right afterwards. Access to our systems is limited to the people who run the site. If a data breach affects you, we will tell you and the authorities as the law requires.
Regulatory position
India's Digital Personal Data Protection Act, 2023 has consent and notice obligations that formally commence on 13 May 2027. We're building toward that ahead of the deadline rather than waiting for it. Analytics consent is currently by continued use of the site; before those obligations commence, we'll move it to an explicit opt-in.
Last updated 26 October 2026. Questions about this policy — see Contact .