Privacy policy
Last updated: October 26, 2026
This translation is provided for convenience. In case of any discrepancy, the French version prevails. Version française
In short
- Your documents are processed in your browser: they are never sent to or stored on our servers.
- Your account only holds your email address, your plan and your counters, hosted in Paris.
- The Assistant receives the text (or the image of a page) only when you start a request.
- No ads, no tracking cookies, no selling of data.
Data controller
GO FAST TRANSPORT, 6 rue des Tilleuls, 78600 Le Mesnil-le-Roi, France. Contact: contact@pdfmoji.com.
Data processed
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Email address | Signing in, service-related messages | Performance of the contract | Until the account is deleted, or 3 years of inactivity |
| Plan, document and request counters | Applying the plan’s limits | Performance of the contract | Life of the account |
| Log of Assistant requests (date, number, plan; never the content) | Hourly and daily limits | Performance of the contract | 3 months |
| Connection fingerprint (salted hash, never the IP address itself) | Stopping one person from multiplying free accounts | Legitimate interest | 3 months |
| Stripe customer and subscription IDs | Managing the subscription | Performance of the contract | Life of the account |
| Invoices | Accounting obligations | Legal obligation | 10 years (kept by Stripe) |
| Email address left on the waiting list | Letting you know when an offer opens | Consent | Until you unsubscribe, 3 years at most |
| Text or image sent to the Assistant | Answering your request | Performance of the contract | Not kept by PDFmoji; according to the AI provider’s policy |
Card details are entered directly with Stripe; PDFmoji never has access to them. Passwords chosen to protect a PDF never leave your device.
Processors
- Supabase Inc.: accounts and counters, servers in Paris (France).
- Vercel Inc.: website hosting and cookieless audience measurement, United States.
- Stripe Payments Europe Ltd: payments, Ireland.
- Anthropic PBC (Claude), United States: processing of Assistant requests.
Transfers outside the European Union are covered by the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
Audience measurement
Traffic is measured without cookies by Vercel Web Analytics: page views, country, device type and a few anonymous steps (sign-up, payment), with no identifier kept from one visit to the next and no link to your account.
Storage in your browser
PDFmoji stores in your browser your sign-in session, your language and, if you choose, your signatures, your autofill profile, your brand and your saved documents. The last document being edited is also kept there (7 days at most) so you can pick up your work after closing the page; you can erase it from Tools › Privacy. These items stay on your device; you can erase them by clearing the site’s data. No advertising cookies are used.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability. You can delete your account yourself from “My account”, or write to contact@pdfmoji.com. You can also lodge a complaint with the CNIL (cnil.fr), the French data protection authority, or with the data protection authority of your country.