Privacy Policy

1. Who handles your information

Pagemaple PDF is operated in Australia by Tofu Studio. Privacy questions go to support@pagemaple.com.

2. Your files

The PDFs, images and other files you open are processed on your device and are not sent to our servers. We cannot see their contents, their names or the changes you make.

The recent files list, the signatures you save and your interface preferences are stored only in the browser on your device. Clearing your browser data removes them.

The on-device AI features use the AI built into your browser and run on your device. Your files and text are not sent to us.

3. What we store

If you sign in or buy a week, month or year plan, we store: your email address; a record of sign-in code requests (including the IP address of the request, to prevent abuse, kept for up to 30 days); your Stripe customer ID; your week and subscription records (type, start and end dates, status); and the IDs of Stripe notifications we have processed.

A single-document purchase needs no account. We do not store it: when you save the file we ask Stripe to confirm the payment, using a random ID for that file that contains none of its contents.

To show prices in your currency, our network provider tells us the country or region your IP address belongs to. We use it to display prices, to create a payment and for the visit statistics described below. Your IP address itself is not stored.

Our hosting and network providers keep access logs (such as IP address and browser type) for security and troubleshooting.

We count visits ourselves, without cookies and without an analytics company. For each page view our server records the page, the site you came from, your country or region, your browser and device type, and your interface language. To tell visitors apart without a cookie, it computes a one-way code from your IP address and browser that changes every day; the IP address itself is not stored, and the code cannot be followed from one day to the next. We also count a few actions in the editor (a file was opened, a tool finished, the payment window was shown, a payment was made, a file was saved or printed) together with the name of the tool, the plan and the currency. A file’s name, its contents and any text in it are never part of this. If your browser sends the Global Privacy Control signal, none of it is recorded. These statistics are kept for 13 months.

When something goes wrong on a page, your browser sends us an error report: the error message and where in our code it happened, the page and tool, your interface language, and your browser and operating system. File names, email addresses and long numbers are removed from the message before it is sent. Reports are kept for 30 days and are not linked to your account or IP address.

4. Cookies

We use two cookies: a session cookie that keeps you signed in (30 days), and a cookie that remembers your language. We do not use advertising cookies, and our visit statistics use no cookies.

5. Other companies that help us run the service

Stripe: takes payments. When you open the payment window your browser loads the checkout from Stripe, and Stripe collects your card details directly. We never see them.

Resend: sends the sign-in code emails.

Railway (hosting) and Neon (database): hold the information listed in section 3.

Cloudflare (content delivery and protection against attacks): carries the traffic between your browser and our server and tells us the country or region of your IP address. It sees your IP address and the pages you open, but does not receive your files.

jsDelivr: the first time you use OCR, your browser downloads language data from this content delivery network. It sees your IP address but does not receive your files.

These providers may store or process information outside Australia, for example in the United States.

6. What we do not do

We do not sell your information, use it for advertising, or train any model on your files. We never receive your files in the first place.

7. Access, correction and deletion

Email support@pagemaple.com to ask what we hold about you, to have it corrected or to have it deleted. When an account is deleted we remove your email address and purchase records. Payment records that the law requires to be kept are held by Stripe under its own rules.

8. Security

Sign-in codes are stored as hashes, the session cookie is signed and cannot be read by scripts, and the whole site uses HTTPS.

9. Complaints

If you are unhappy with how we have handled your information, please contact us first. You can also complain to the Office of the Australian Information Commissioner (OAIC).

10. Changes to this policy

If what we do changes (for example, if we start working with another provider), we will update this page and its date first.