Privacy Policy

When you sign in with Google (via our authentication provider, Clerk), Google shares only your basic sign-in profile with us: your name, email address, and profile picture. We request only the standard sign-in scopes — openid, email, and profile.

We use this data solely to create and maintain your account, identify you when you sign in, and communicate about your account. We do not access your Gmail, Google Drive, Calendar, Photos, contacts, or any other Google service, and we do not request sensitive or restricted Google scopes.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we never sell Google user data, never use it for advertising (including retargeting or interest-based ads), never use it to determine credit-worthiness or for lending, and never allow humans to read it except as needed for security, legal compliance, or with your explicit consent. Data is not transferred to third parties except as described in section 5 to operate the service, for security, to comply with law, or as part of a merger or acquisition with your prior consent.

Account data: email address and authentication identifiers managed by Clerk.

Your content: documents you create, prompts and chat messages, uploaded files (images, PDFs, text files), and document settings. Documents are stored in your account library so they sync across your devices.

Usage & billing data: AI-usage metering (credits), plan status, and payment metadata processed by Polar. We do not store full payment card numbers.

Technical data: standard logs (device, browser, pages viewed, timestamps) needed for security and reliability.

To provide, maintain, and improve PaintPDF; to authenticate you and keep your documents available across devices; to meter AI usage and bill your plan; to provide support; to protect against abuse; and to comply with legal obligations.

Account and document data is hosted on our infrastructure providers (Clerk for identity, Convex for the application database and document records). Files you attach in the chat (images, PDFs) upload directly from your browser to UploadThing file storage and are referenced by URL; deleting a document schedules deletion of its attached files. We retain your data while your account is active. You can delete individual documents from the studio, and you can request deletion of your account and associated data at support@paintpdf.com.

We share data only with the service providers needed to run PaintPDF, each processing data only on our instructions:

• Clerk — authentication (including Google sign-in) and session management.
• Convex — application database and document storage.
• UploadThing — file storage for images and PDFs you attach in the chat.
• Polar — subscription billing for paid plans (Starter and Pro).
• OpenCode / model providers — to generate AI responses to your prompts. Prompt content you submit may be processed to produce the response.
• Exa (only when you ask for web research) — to search the web, fetch public pages you request, and answer quick questions with cited sources.

We do not sell your personal information and do not share it with data brokers or advertising platforms.

You can access, correct, export, or delete your documents in the studio at any time. To exercise privacy rights (access, rectification, erasure, restriction, portability, objection) or withdraw consent for optional processing, email support@paintpdf.com. We respond within a reasonable time and at most within the period required by applicable law. EU/UK users may also lodge a complaint with their supervisory authority.

We use encrypted connections (HTTPS), authenticated sessions, and access controls at our providers. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

PaintPDF is not directed to children under 13 (or the higher minimum age in your jurisdiction), and we do not knowingly collect their personal information.

We will post updates on this page and revise the date above. For material changes we will provide additional notice, such as in the app or by email.