Política de privacidad
Effective date: August 18, 2026.
Zonepdf Inc. ("ZonePDF", "us", "we", or "our"), an Illinois corporation, operates the https://zonepdf.com website, the ZonePDF desktop application, and the ZonePDF browser extension (together, the "Service"). This page explains what information we collect, what we do with it, and the choices you have.
The short version
- Documents you upload are processed to perform the operation you asked for and are automatically deleted from our servers within 8 hours of upload. You can delete them sooner yourself.
- We do not read your documents, use them for marketing, or use them to train AI models.
- AI features run only when you choose to use them. When you do, document text is sent to a third-party AI provider to generate your answer.
- We do not sell your personal data, and no third-party advertising networks serve ads on the Service.
- You can use the tools without an account. If you create one, you can close it and delete its data from your account settings at any time.
Your documents
Files you add to the Service are uploaded over an encrypted connection (TLS) and stored temporarily so that the operation you requested — for example merging, compressing, splitting, or converting — can run and you can download the result.
- Automatic deletion. Uploaded files and the files produced from them are permanently deleted from our servers within 8 hours of upload.
- Manual deletion. You can delete a file from the workspace at any time before that, and it is removed immediately.
- No content use. We do not read the contents of your documents, show them to anyone, use them for advertising or marketing, or use them to train machine-learning models. Automated systems access file content only to perform the operations you request (including a malware check at upload).
- Operation records. We keep statistics about operations — which tool ran, file sizes, timing, success — to operate and improve the Service. These records do not contain document content.
Our servers are hosted on Amazon Web Services in the United States.
AI features
Some tools — AI PDF, Chat with PDF, and PDF Summarizer — use a large language model to answer questions about a document or summarize it. These features run only when you open them and submit a document or a question; no AI processing happens on files you upload to the other tools.
When you use an AI feature, the text of your document and the messages you type are sent to a third-party AI model provider, which processes them solely to generate the response you asked for. We do not use your documents or conversations to train models, and files produced by AI features are deleted on the same schedule as everything else.
Accounts and sign-in
You can use the Service without an account. If you create one, we collect and store:
- Your email address, and your name if you provide it.
- If you sign in with Google, the basic profile information Google shares with us (name, email address, profile picture). We do not receive your Google password.
- Your plan, settings, and billing history if you purchase a subscription.
We use this information to operate your account, provide support, send receipts and service notices, and apply the limits of your plan.
Google Drive and Dropbox
You can import files from, and save files to, Google Drive and Dropbox. When you connect one of these services, we receive an access token and use it only to transfer the specific files you pick. We do not browse, index, or store the rest of your cloud storage, and files imported this way follow the same deletion schedule as other uploads. You can revoke ZonePDF's access at any time from your Google or Dropbox security settings.
ZonePDF's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Payments
Paid plans are processed by Braintree, a PayPal service. Your card details are provided directly to Braintree and never touch our servers; Braintree adheres to the PCI-DSS standards managed by the PCI Security Standards Council. We keep records of your transactions (plan, amount, date) but not your card number. Braintree's privacy policy is available at paypal.com.
We send transactional email — receipts, password resets, service notices — to the address on your account. With your account we may also send product news and offers; every such email contains an unsubscribe link, and opting out does not affect transactional email or your use of the Service.
Usage data and cookies
Like most websites, we automatically collect technical information when you use the Service: IP address, browser type and version, the pages you visit, and the time and duration of your visit.
We use cookies and similar technologies for:
- Session and security. Keeping you signed in and protecting your account.
- Preferences. Remembering your settings.
- Analytics. We use Google Analytics to understand how the Service is used. Google's privacy policy is at policies.google.com/privacy, and Google offers an opt-out browser add-on.
We advertise ZonePDF on advertising platforms such as Google Ads, but no third-party advertising network serves ads on the Service, and we do not sell or share your personal data for cross-context behavioral advertising. You can instruct your browser to refuse cookies; parts of the Service that depend on them (such as staying signed in) may then not work.
Desktop application and browser extension
The ZonePDF desktop application can process documents locally on your computer; those files stay on your device unless you use a feature that works through our servers, which is then covered by this policy. The application contacts our servers for license checks, updates, and basic anonymous usage statistics. The browser extension is a shortcut to the web Service and collects no data of its own.
Retention
- Uploaded and generated files: deleted within 8 hours of upload, or earlier if you delete them.
- Account data: kept while your account exists. Closing your account from your settings deletes the personal data associated with it, except records we must keep for legal, tax, or accounting reasons.
- Operation statistics and usage data: retained for internal analysis, security, and service improvement.
Legal bases for processing (GDPR)
Where the EU or UK General Data Protection Regulation applies, we process personal data on these bases:
- Performance of a contract — processing the files you submit, operating your account, and providing paid plans.
- Consent — marketing email, and connections you choose to make such as Google Drive or Dropbox. You can withdraw consent at any time.
- Legitimate interests — securing and improving the Service, preventing abuse, and understanding usage, where not overridden by your rights.
- Legal obligation — records we are required to keep.
International transfers
We are a United States company and process data in the United States. If you use the Service from elsewhere, your information is transferred to and processed in the US, where data-protection law may differ from your jurisdiction's. We take the steps described in this policy to protect it wherever it is processed.
Your rights
Depending on where you live — including the EU/EEA and the UK (GDPR), Brazil (LGPD), and California (CCPA/CPRA) — you may have the right to:
- Access the personal data we hold about you, and receive a copy in a portable format.
- Correct inaccurate data.
- Delete your data.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Complain to your data-protection authority (in Brazil, the ANPD; in the EU/EEA, your local supervisory authority).
You can exercise most of these directly: files can be deleted from the workspace, and your account — including its data — can be closed from your account settings. For anything else, contact us at the address below; we may need to verify your identity before acting on a request. We do not discriminate against you for exercising these rights, and we do not sell personal data.
We do not currently respond to browser "Do Not Track" signals.
Children and use in schools
The Service is not directed to children under 13, and we do not knowingly collect personal data from a child under 13 on our own initiative. ZonePDF is used in schools: where a school, district, or teacher provides students with access — for example through the school's own Google Workspace for Education accounts — the school is responsible for obtaining any authorizations and consents that student use requires, and we process student data only to provide the Service to that school community.
If you are a parent, guardian, or school official and believe a child has provided us personal data without the required consent, contact us and we will delete it. Schools with questions about student data can reach us at the same address.
Changes to this policy
When we make material changes to this policy, we will post the new version here, update the effective date, and give notice on the Service or by email before the changes take effect.
Contact us
If you have any questions about this Privacy Policy or your data:
- By email: support@zonepdf.com
- By visiting this page on our website: Contacts