Privacy Policy

WebifyPDF helps teams turn PDFs into web forms, collect responses, and export completed responses back into PDFs. This Privacy Policy explains how WebifyPDF collects, uses, shares, and protects information when people use the WebifyPDF website, dashboard, public form links, and related services.

There are two common roles in WebifyPDF: account users who create and manage forms, and respondents who complete forms through links created by account users. If you are a respondent, the organization or person who sent you a WebifyPDF form decides what information to request in that form. Contact that form owner first for questions about why they requested particular information.

Account information. We collect information used to create and manage accounts, such as email address, display name, account name, account membership, role, support email, account branding, authentication records, and timestamps such as account creation and last-seen activity.

PDF and form information. Account users may upload PDFs, filenames, page counts, form fields, field labels, form settings, public sharing settings, password-protection settings, confirmation messages, redirect URLs, and related configuration. Uploaded PDFs and account logos are stored by our backend provider.

Respondent and submission information. Depending on the form settings and the fields added by the form owner, respondents may provide name, email address, text answers, selections, checkbox values, signatures, uploaded signature images, and other information entered into form fields. We store submissions, timestamps, export status, email delivery status, and related operational metadata.

Billing information. If an account user starts or manages a paid plan, we process plan selections, billing status, subscription metadata, invoices, customer identifiers, and related billing events. Payment card details are handled by our billing and payment providers; WebifyPDF does not store full payment card numbers.

Usage, device, advertising, and diagnostic information. We and our service providers may collect information such as pages or app routes viewed, product events, browser or device information, IP address, cookies, session identifiers, click identifiers, error reports, and diagnostic metadata so we can operate, secure, debug, measure, market, and improve the service.

We use information to provide the product, authenticate users, upload and store PDFs, detect and configure PDF fields, publish forms, collect submissions, export filled PDFs, send submission notifications, manage billing, provide support, monitor reliability, prevent abuse, debug errors, improve product quality, and comply with legal obligations.

We may use website and product activity to measure advertising performance, understand which campaigns lead to signups or billing activity, create or measure advertising audiences, and improve WebifyPDF marketing. We may use aggregated or de-identified information to understand product usage and improve WebifyPDF.

We do not sell personal information, and we do not use uploaded PDFs, form answers, signatures, or respondent submissions for cross-context behavioral advertising.

When an account user uploads a fillable PDF, WebifyPDF may analyze the PDF to identify form fields and improve respondent-facing labels. In the current implementation, the raw PDF file is stored in WebifyPDF's backend storage and is not sent as a raw file to the AI analysis provider. The analysis request may send PDF metadata, including filename, page dimensions, embedded field names, field types, options, coordinates, and extracted nearby text from the PDF.

AI analysis is provided through OpenRouter and the model providers it routes to. Because extracted PDF text may contain personal or sensitive information, do not upload PDFs containing protected health information, highly regulated data, or other sensitive material unless you have confirmed that WebifyPDF's current processing setup and provider agreements meet your requirements.

We share information with service providers that help us run WebifyPDF. These include Clerk for authentication and user identity; Convex for database, file storage, and backend functions; OpenRouter and model providers for AI-assisted PDF field analysis; Resend for transactional submission emails; Autumn and Stripe for subscriptions, billing, invoices, and payment processing; PostHog for product analytics, error reporting, and limited dashboard session replay; DataFast for website analytics; Meta for advertising measurement, conversion tracking, and retargeting; Cloudflare/cdnjs for loading the PDF.js worker used during PDF parsing; and hosting, security, infrastructure, and support providers as needed.

In the current Meta advertising integration, WebifyPDF may send events such as page views, signup intent, account registration, first PDF upload, checkout start, trial start, and subscription status. These events may include browser or server metadata such as IP address, user agent, page URL, event ID, Meta browser and click cookies, hashed email, hashed internal user or account identifiers, plan identifiers, and event properties. We do not send uploaded PDF files, form field contents, form answers, signatures, respondent submissions, or full payment card details to Meta through this integration.

We may also disclose information if required by law, to protect rights and safety, to investigate abuse or security issues, or as part of a merger, acquisition, financing, reorganization, or sale of assets.

WebifyPDF uses cookies and similar technologies for authentication, session management, analytics, security, product diagnostics, advertising measurement, and conversion tracking. You can control cookies through your browser settings, but disabling some cookies may prevent the service from working correctly.

PostHog product analytics are configured with automatic pageview capture and general autocapture disabled. WebifyPDF records specific dashboard events and exceptions. If dashboard session replay is enabled, it is limited to authenticated dashboard routes and configured to mask text and inputs. Public form rendering is marked to avoid PostHog capture. DataFast may collect website pageview analytics when configured.

Meta Pixel and Conversions API may be used on the marketing site, authentication pages, dashboard, and billing flow to measure ad performance and connect browser events with server-confirmed events. WebifyPDF uses matching event IDs for browser and server events where applicable to reduce duplicate conversion counting. Public respondent form pages under /f/ are excluded from Meta advertising events in the current implementation.

You may limit some tracking through browser settings, device settings, ad platform settings, or other tools offered by advertising providers. Blocking cookies or tracking technologies may affect measurement and personalization but should not prevent core authenticated product functionality except where cookies are required for login or security.

We retain account, PDF, form, response, billing, analytics, and diagnostic information for as long as needed to provide WebifyPDF, maintain the account, comply with legal obligations, resolve disputes, prevent abuse, and enforce agreements.

Account users can delete forms and responses from the dashboard. Deleting a form deletes its responses and form versions. If no other form uses the same uploaded PDF, the associated PDF file is also deleted from storage. Some records may remain for a limited time in backups, logs, provider systems, billing records, or where retention is required for security, legal, tax, accounting, or fraud-prevention reasons.

WebifyPDF does not yet have a fixed automatic retention schedule for active account content. Account users are responsible for deleting PDFs, forms, and responses they no longer need.

We use administrative, technical, and organizational safeguards designed to protect information processed by WebifyPDF. No online service can guarantee absolute security, and account users are responsible for managing access to their accounts and form links.

Forms may be public, restricted, or password protected. Password-protected forms store a hashed password, not the plain-text password. Public links can be accessed by anyone with the link unless the form owner restricts or password protects the form.

WebifyPDF is not currently offered as a HIPAA-compliant service and does not currently provide a business associate agreement. Do not use WebifyPDF for protected health information, legally privileged records, regulated financial data, or other compliance-sensitive workflows unless you have a written agreement confirming that the service is appropriate for that use. WebifyPDF captures signatures as form answers, but it is not currently designed as a full electronic signature compliance system with signer identity verification, audit trails, or evidence packages.

Account users can update certain account settings in the dashboard, manage billing through the billing flow, delete forms and responses, and choose whether a public form requests respondent name or email.

You may contact us at contact@webifypdf.com to request access, correction, deletion, export, or other privacy assistance. We may need to verify your identity and account authority before acting on a request. If you are a respondent, we may direct you to the form owner when the request concerns information submitted to that owner's form.

Depending on where you live, you may have privacy rights under applicable law, such as rights to know, access, correct, delete, restrict, object to, or receive a copy of certain personal information. We will handle applicable privacy requests as required by law.

WebifyPDF is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 provided personal information to WebifyPDF, contact us so we can review and take appropriate action.

WebifyPDF and its service providers may process information in the United States and other countries. Privacy and data protection laws in those countries may differ from the laws where you live.

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. If changes are material, we may provide additional notice through the website, dashboard, or email.

Questions or requests about this Privacy Policy can be sent to contact@webifypdf.com.