Privacy Policy

Piyanshu Agrawal, trading as PS Labs (“PS Labs,” “we,” “us”), operates pdfsafe.io. PS Labs is a sole proprietorship based in India. This policy explains, as plainly as we can, what happens to your files and your data when you use this site.

The short version

Every tool on this site, including PDF to Word, processes your file entirely inside your own browser. Your file is never uploaded, never sent to a server, and never seen by us — the conversion happens on your device using WebAssembly and JavaScript, the same way a program installed on your computer would work. When you close the tab, the file is gone; we never had a copy in the first place.

What we collect today

We do not currently run any analytics, advertising, or tracking software on this site. We do, however, now offer an optional account and a paid Premium subscription, both of which collect real data — see below.

Accounts (optional)

You don’t need an account to use any tool on this site — every tool works for free with or without one, subject to the limits described on our Pricing page. That said, we do offer an optional account, and creating one does collect real data:

• Your email address.
• Which sign-in method you used to create the account — email and password, a magic link, or Google OAuth. If you sign in with Google, we receive your email address from Google; we do not receive your Google password or access to your broader Google account.
• A subscription_statusfield (“free” or “premium”), and — if you subscribe to Premium — billing details described in the Payments section below.

This data is stored with Supabase, our authentication and database provider, protected by row-level security policies that stop other regular users from ever reading or writing your account record — no user can see another user’s data through the application. A small number of authorized admin and super-admin accounts (accounts we control) can access and update account records directly, through documented admin functions such as granting or revoking Premium access, resolving a billing issue, or investigating abuse — we don’t claim otherwise. Every one of those admin actions is written to an internal audit log recording which admin did it, what the action was, and when. We use this data solely to let you log in and to identify your account for your Premium subscription, if you have one. We do not use it for marketing, and we do not sell or share it with third parties.

Like any web server, ours may incidentally log basic technical request information (such as an IP address and timestamp) for security and abuse-prevention purposes, in line with standard web hosting practice. This includes counting requests to PDF to Word’s free conversion limit (see Cookies, below, for how that specific limit works) — we do not combine any of this with other data to identify you personally, and we do not use it for marketing or profiling.

Payments

Premium subscriptions are billed one of two ways depending on where you’re located. If you’re in India, billing goes through Razorpay, a licensed Indian payment processor. Everywhere else, billing goes through Paddle.com, our reseller and Merchant of Record, who handles checkout, payment collection, and tax (VAT/sales tax/GST) compliance on our behalf. Either way, we never see or store your full card, UPI, or bank details — the processor collects those directly.

What we do store, tied to your account, is limited to: which plan and billing interval you chose, the subscription amount and currency, the processor’s subscription and payment/customer IDs, your billing country (Razorpay customers only — Paddle handles this itself as Merchant of Record), and your subscription’s status (active/cancelled). We use this solely to grant and maintain your Premium access, not for marketing, and we do not sell or share it with third parties beyond the relevant payment processor.

We retain these payment/subscription records after a subscription is cancelled, rather than deleting them immediately — this is standard practice for accounting and tax purposes, and required under Indian tax law. This is separate from your account itself: closing your account (see Your rights, below) deletes your email and login details, but we retain the associated transaction records for as long as accounting/tax rules require.

Cookies

We still do not use cookies for analytics, advertising, or tracking. If you create an account, we do set a small number of functional cookies — via Supabase, our authentication provider — solely to keep you signed in between visits.

The PDF to Word tool also sets one functional cookie, even if you don’t have an account: a random ID with no personal data attached, used alongside your IP address only to apply our free-tier daily limit (3 conversions/day) on that tool fairly across a browser and a network. Neither signal is used for analytics, advertising, or identifying you as a person — and since this file conversion itself still happens entirely in your browser, neither one ever sees the contents of your file.

Your rights

If you’ve created an account, we hold your email address and subscription status as described above; if you haven’t, we hold essentially no personal data about you. Either way, you always have the right to:

• Ask us what data, if any, we hold about you.
• Ask us to delete any data we hold about you, including closing your account.
• Ask us questions about how this site handles your files or data.

Contact us at privacy@pdfsafe.iofor any of the above, and we’ll respond as quickly as we can.

For visitors in the European Union / EEA / UK

Under the GDPR and UK GDPR, you have the right to access, correct, delete, restrict, or port any personal data we hold about you, and the right to object to its processing. Our legal basis for the minimal technical logging described above is legitimate interest (keeping the service secure and operational). We do not transfer your data to third countries beyond what’s inherent in operating a web server, and we do not sell or share personal data with third parties for their own marketing purposes. You may lodge a complaint with your local data protection authority if you believe we’ve mishandled your data — though given how little we collect, we hope that’s never necessary.

Children’s privacy

This site is not directed at children under 13, and we do not knowingly collect personal data from children.

Changes to this policy

If we materially change what data we collect or how we use it — most notably when accounts or payments launch — we’ll update this page and change the “Last updated” date above. We won’t backfill new data practices into an old, unrevised version of this policy.

Contact

Questions about this policy or how your data is handled: reach us at privacy@pdfsafe.io. For anything else, see our Support page.