1. Introduction
oMyPDF (“we,” “our,” or “us”) operates the website omypdf.comand provides free, online PDF processing tools (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
By using the Service you agree to the practices described in this policy. If you do not agree, please discontinue use.
2. Information We Collect
2.1 Files You Upload
When you use a tool that processes files on our servers, your files are temporarily transmitted over an encrypted (HTTPS) connection. We process them solely to perform the operation you requested and do not read, analyse, index, or share their contents. Files are automatically and permanently deleted within 1 hour of processing.
Many oMyPDF tools — including most merge, split, compress, and convert operations for files under 15 MB — run entirely in your browser. In those cases no file data is ever transmitted to any server.
2.2 Usage and Log Data
Our servers automatically record standard access logs which may include your IP address, browser type, operating system, referring URL, pages visited, and timestamps. We use this information only to operate and improve the Service and to detect abuse. Log data is retained for a maximum of 14 days, after which it is automatically deleted, unless retention is required by an ongoing security investigation or applicable legal obligation.
2.3 Account Information
If you create an account, we collect your email address and a securely hashed password (we never store your password in plain text). We also store your chosen plan and the date your account was created. Payment card details (when payments are available) are processed exclusively by our payment provider — we never receive or store raw card numbers.
2.4 Cookies and Tracking Technologies
We use essential cookies required for the Service to function (session management, authentication tokens) and, with your consent, optional analytics cookies. See our Cookie Policy for details.
3. How We Use Your Information
- To provide, operate, and maintain the Service.
- To authenticate you when you log in or reset your password.
- To send transactional emails (account confirmation, password reset) — never unsolicited marketing without your explicit opt-in.
- To detect and prevent fraud, abuse, and security incidents.
- To improve the Service based on aggregated, anonymised usage patterns.
- To comply with applicable legal obligations.
We do not sell, rent, or trade your personal information to any third party, ever. We do not run advertising on oMyPDF and do not use your data for ad targeting.
Legal Bases for Processing
Where data protection law requires a legal basis, we process personal data on the following grounds:
- Contractual necessity — to create and manage your account, authenticate you, and deliver the specific operation you request.
- Legitimate interests — to operate, maintain, and improve the Service; to detect and prevent fraud, abuse, and security incidents; and to analyse aggregate usage patterns.
- Consent — for optional analytics cookies and any marketing or newsletter communications you explicitly opt into. You may withdraw consent at any time.
- Legal obligation — where we are required to retain or disclose data under applicable law or a lawful court order.
4. File Processing & Deletion
Server-processed files
Files submitted to our server are stored in a secure, isolated temporary directory. They are automatically and permanently deleted within 1 hourof the completed operation. Shareable download links expire after 1 hour. You can also delete your result immediately using the “Delete file” button in the result panel after processing.
Browser-processed files
For tools that run in your browser (the majority of oMyPDF tools for smaller files), your files are loaded into your device's memory and processed entirely using JavaScript. No file data is transmitted to any server. The processed result is downloaded directly to your device.
Important: We strongly advise you not to upload highly sensitive documents (medical records, financial statements, government-issued identification, legal contracts containing confidential information) to any online service, including ours. For such documents, use a browser-only tool where files never leave your device, or use a local desktop application.
6. Third-Party Services
We work with the following third-party services. Each provider's own privacy policy governs how they handle any data they receive. We share only the minimum data required for each service to function.
| Service | Purpose | Privacy Policy |
|---|---|---|
| Cloudflare | CDN, DDoS protection, DNS | cloudflare.com/privacypolicy |
| Contabo | VPS hosting — all data stored on our own server | contabo.com/legal/privacy |
| Razorpay | Payment processing — card details handled by Razorpay directly | razorpay.com/privacy |
| Google Analytics | Aggregated, anonymised usage analytics (optional) | policies.google.com/privacy |
7. Data Security
We implement appropriate technical and organisational security measures including HTTPS/TLS encryption for all data in transit, isolated temporary storage with automatic deletion, and access controls on our backend infrastructure.
No method of internet transmission or electronic storage is 100% secure. While we strive to protect your information using commercially acceptable means, we cannot guarantee absolute security. You use the Service at your own risk.
8. Your Rights
GDPR — European Economic Area
If you are located in the EEA, you have the right to: access the personal data we hold about you; rectify inaccurate data; erase your data (“right to be forgotten”); restrict or object to processing; receive your data in a portable format; and lodge a complaint with your national data protection supervisory authority.
CCPA — California Residents
California residents have the right to know what personal information we collect, request deletion of their personal information, and opt out of the sale of personal information (we do not sell personal information).
To exercise any of these rights, please contact us through our website at omypdf.com. We will respond within 30 days. You may also lodge a complaint with the data protection supervisory authority in your country or region if you believe we have not handled your data lawfully.
9. Children's Privacy
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately through our website at omypdf.com and we will delete it promptly.
10. International Data Transfers
oMyPDF is a globally available service. Our third-party infrastructure and service providers — including those listed in §6 — operate data centres and servers in various countries around the world. As a result, information we collect may be transferred to, stored in, and processed in countries outside your country of residence, which may have different data protection rules than your own jurisdiction.
Wherever your data is processed, we take steps to ensure it is handled with an equivalent level of care as described in this policy, including relying on standard contractual clauses or other appropriate transfer mechanisms where required by applicable law.
By using the Service you acknowledge that your information may be transferred and processed internationally as described above.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated version with a revised “Last updated” date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
12. Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please visit omypdf.com and use the contact options available on the website. We aim to respond to all enquiries within 30 days.
Also see our Terms of Service and Cookie Policy.