Privacy Policy

1. Information We Collect

When you create an account on PDFxlsx, we collect the information you provide directly: your name, email address, and password (stored in hashed form). If your team signs in through its own identity provider (single sign-on), we receive from that provider your name, email address and whether that address is verified, and we use them only to sign you in to your team. If you subscribe to a paid plan, payment processing is handled entirely by our payment processor. We do not store credit card numbers, bank account details, or other payment credentials on our servers. Our payment processor provides us with a customer identifier and subscription status, which we store to manage your account.

When you use our PDF to Excel conversion service, we temporarily process the PDF files you upload. These files are stored in encrypted form during the conversion process and are automatically deleted from our servers within 24 hours of conversion completion. We do not read, analyze, or use the content of your documents for any purpose other than performing the conversion you requested.

We collect standard usage data including IP addresses, browser type, pages visited, and feature usage patterns. This data helps us improve the service, diagnose technical issues, and understand how teams use PDFxlsx. We do not sell this data to third parties.

2. How We Use Your Information

We use your account information to provide and maintain the PDFxlsx service, process your subscriptions, send transactional emails (account verification, password resets, subscription confirmations), and communicate important service updates. We may send occasional product update emails, which you can opt out of at any time.

Usage data is aggregated and analyzed to improve our conversion engine accuracy, optimize processing performance, identify and fix bugs, and plan feature development. Individual usage data is never shared with other customers or third parties.

3. File Processing and Data Security

All PDF files uploaded to PDFxlsx are encrypted in transit using TLS 1.3 and encrypted at rest using AES-256 encryption. Each conversion runs in an isolated processing environment to prevent any data leakage between customers. Uploaded files are automatically purged from our systems within 24 hours of conversion. The spreadsheet you download is built from the extracted table data at the moment you request it, and that data stays in your conversion history until you ask us to remove it.

We never access, read, or analyze the content of your documents except through our automated conversion engine. Our employees do not have access to customer file contents. Enterprise customers can have our data processing agreement countersigned.

4. Third-Party Services

PDFxlsx uses the following third-party services to operate:

  • Payment processor for payment processing. The payment processor acts as an independent controller for your payment card data.
  • Email service provider for transactional emails (account verification, receipts, notifications).
  • Document recognition provider that reads scanned pages without a text layer and returns the recognised text, under terms that exclude using your documents to train models.
  • Cloud infrastructure provider for hosting and file storage, with data centers located in the United States and European Union.

We do not use advertising networks, tracking pixels from social media platforms, or sell your data to data brokers. Where a provider processes data outside the EEA, the transfer relies on Standard Contractual Clauses or an adequacy decision. The full list of our processors is available on request at support@pdfxlsx.com.

5. Team and Collaboration Data

When you create a team on PDFxlsx, the team shares one subscription, one monthly conversion quota and one conversion history. Every member of the team sees the conversions run within the team, with the file name, the member who ran it and the time, can download the results without uploading the file again, and sees the team's usage per member. Column mapping templates saved for the team are visible to every member. Team data is scoped to the team and is not visible to users outside the team, and a person who leaves the team loses access to it.

6. Cookies

PDFxlsx uses essential cookies to maintain your login session and remember your preferences. We do not use advertising cookies, social media tracking cookies, or third-party analytics cookies that track you across other websites. Session cookies expire when you close your browser or after a period of inactivity.

7. Your Rights

You can access and update your account information at any time from your profile settings. Cancelling a subscription does not delete anything by itself: your conversion history stays in your account unless you ask us to remove it, either by ticking the deletion box when you cancel or by writing to us. When you ask for deletion while cancelling, we remove your conversion history and stored files 30 days after your paid period ends, and we email you before that happens. To have your account and all of its data removed at any other time, write to support@pdfxlsx.com. For GDPR data subject requests, contact us at support@pdfxlsx.com.

8. Data Transfers

PDFxlsx operates infrastructure in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States. We implement appropriate safeguards for international data transfers including standard contractual clauses where required. Enterprise customers can request data processing within specific geographic regions.

9. Children

PDFxlsx is a business tool and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

10. Contact

For questions about this privacy policy or our data practices, contact us at support@pdfxlsx.com. Business customers who need a data processing agreement under Article 28 GDPR will find it on the Data Processing Agreement page.