Privacy Policy

Last updated: May 27, 2026

Introduction

This Privacy Policy explains how PDFem ("we," "us," or "our"), operating at pdfem.com, collects, uses and protects your information when you use our file conversion services. We are committed to protecting your privacy and handling your data with transparency and care.

By using PDFem, you agree to the collection and use of information as described in this policy. If you do not agree with this policy, please do not use our services.

Data Controller

PDFem, accessible at pdfem.com, is the data controller responsible for the processing of your personal data. For any questions or concerns regarding this Privacy Policy or our data practices, you can contact us at [email protected].

Information We Collect

Files You Upload

When you use our conversion tools, you upload files to our servers for processing. These files are stored temporarily on our secure servers for the sole purpose of performing the requested conversion. We do not read, analyze, index, or access the content of your files in any way beyond what is necessary to complete the conversion.

Technical Information

We may automatically collect certain technical information when you visit pdfem.com, including:

Your IP address (used for rate limiting and abuse prevention)
Browser type and version
Operating system
Referring website
Pages visited on our site and timestamps
Device type (desktop, mobile, tablet)

This information is collected through server logs and is used solely for maintaining the security and performance of our service. We do not use analytics tracking scripts or third-party tracking cookies.

Information You Provide Voluntarily

If you contact us through our contact form or by email, we collect the information you choose to provide, such as your name, email address and the content of your message. This information is used solely to respond to your inquiry.

How We Process Your Files

When you upload a file to PDFem for conversion, the following process takes place:

Your file is uploaded to our secure server over an encrypted HTTPS connection.
The file is stored temporarily in a private directory that is not accessible to the public or to other users.
Our conversion engine processes the file and produces the output in the requested format.
The converted file is made available to you for download.
Both the uploaded file and the converted file are automatically and permanently deleted from our servers within 10 minutes after the conversion is completed.

We do not retain copies of your files beyond this temporary processing window. We do not create backups of uploaded or converted files. Once the files are deleted, they cannot be recovered by us or anyone else.

Legal Basis for Processing (GDPR Article 6)

For users in the European Economic Area (EEA) and the United Kingdom, we process your data based on the following legal grounds:

Legitimate Interest: We process technical data (IP addresses, browser information) based on our legitimate interest in maintaining the security, availability and performance of our service and in preventing abuse.
Consent: By using our service and uploading files, you consent to the temporary processing of those files for the purpose of conversion. You may withdraw this consent at any time by simply not using the service.
Contractual Necessity: The processing of your files is necessary to provide you with the conversion service you have requested.

Data Retention

We retain different types of data for different periods:

Uploaded and converted files: Automatically deleted within 10 minutes of conversion completion.
Server logs: Retained for up to 30 days for security monitoring and then deleted.
Contact form submissions: Retained for as long as necessary to resolve your inquiry and then deleted.

We do not maintain any permanent database of user files, user accounts, or user activity profiles.

Your Rights Under GDPR

If you are a resident of the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:

Right of Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You may request that we correct any inaccurate data we hold about you.
Right to Erasure: You may request that we delete your personal data. Since we automatically delete all files and do not maintain user accounts, this right is effectively exercised automatically by our system.
Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances.
Right to Data Portability: You may request that we provide your data in a structured, machine-readable format.
Right to Object: You may object to the processing of your personal data based on legitimate interest.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

Your Rights Under CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights:

Right to Know: You have the right to know what personal information we collect, use and share.
Right to Delete: You have the right to request deletion of your personal information.
Right to Opt-Out: You have the right to opt out of the sale of your personal information. We do not sell your personal information to any third party.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Cookies

PDFem uses only essential cookies that are strictly necessary for the functioning of our service:

Session Cookie: A temporary cookie that maintains your session while you use our site. This cookie expires when you close your browser or after 24 hours.
Cookie Consent Cookie: A small cookie that remembers whether you have accepted our cookie notice, so we do not show it to you on every visit.

We do not use analytics cookies, advertising cookies, or any form of tracking cookies. We do not use Google Analytics or any similar third-party analytics service. For more information about our use of cookies, please see our Cookie Policy.

Third-Party Services

PDFem uses the following third-party services:

Cloudflare: We use Cloudflare as our content delivery network (CDN) and DDoS protection provider. Cloudflare may process certain technical data (such as IP addresses) as part of its service. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.
Google Fonts: We load the Inter font from Google Fonts. Google may collect certain technical information as part of this service. Google's privacy policy is available at policies.google.com/privacy.

We do not share, sell, or otherwise transfer your files or personal data to any third party for marketing, advertising, or any other purpose unrelated to the provision of our service.

International Data Transfers

Our servers are located in secure data centers. If you are accessing PDFem from outside the country where our servers are located, please be aware that your data may be transferred to, stored and processed in a different jurisdiction. By using our service, you consent to such transfer. We take appropriate measures to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it.

Children's Privacy

PDFem is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us at [email protected] and we will take steps to delete such information.

Security Measures

We take the security of your data seriously and implement appropriate technical and organizational measures to protect it:

All data transfers between your browser and our servers are encrypted using TLS/SSL (HTTPS).
Uploaded files are stored in private directories that are not publicly accessible.
Files are automatically deleted within 10 minutes of processing.
Server access is restricted to authorized personnel only.
We regularly update our server software and dependencies to address known security vulnerabilities.
We use Cloudflare to provide an additional layer of protection against DDoS attacks and other threats.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]