Privacy Policy | PatchPDF

Overview

PatchPDF provides a browser-based service for editing existing PDF text. This policy explains what information is processed when you visit the website, use the hosted editor, contact PatchPDF, or submit optional beta feedback.

The document boundary

The complete PDF is opened and modified in your browser. PatchPDF does not upload the complete PDF to its application server in the standard hosted flow.

For an AI-assisted edit, PatchPDF sends your instruction, selected text, the full selected text block, limited text from nearby parts of the page, page-location references, and limited layout information through the PatchPDF API to OpenAI. Do not use the hosted editor for highly sensitive identity, health, or financial-account records.

Information processed

Service data. Hosting providers may process IP addresses, request timestamps, browser details, URLs, and security or error logs needed to operate the service.
Product events. PatchPDF records product events that do not contain document content. Each uses random identifiers created for the visit and document session. Events may contain general device and platform categories, country code, release versions, timing, edit counts, and predefined outcome codes.
Excluded analytics data. Analytics does not include filenames, PDF text, selections, instructions, prompts, model responses, full URLs, session replay, or persistent visitor profiles.
Contact data. PatchPDF processes your email address and the message you choose to send.
Beta pricing feedback. After a successful export, PatchPDF may record whether the user says they would pay for export after beta. The response contains no document content and is linked only to the random product journey and project identifiers used for operational analytics.
Payments. PatchPDF does not accept payments or collect payment data during the public beta.

Purposes and legal bases

PatchPDF processes information to perform the service you request, provide support, prevent abuse, secure and troubleshoot the product, comply with legal obligations, and understand whether the content-free product flow works. Depending on the processing, the legal basis is contract, legitimate interests in operating and securing the service, legal obligation, or consent.

Service providers and transfers

PatchPDF uses Amazon Web Services for hosting, OpenAI for AI-assisted edit proposals, and PostHog for content-free product analytics. OpenAI API inputs and outputs are not used to train models by default. Default API abuse monitoring may retain customer content for up to 30 days unless stronger data controls are approved for the deployed project.

Providers process data under their contracts and applicable legal obligations. Where personal data crosses borders, PatchPDF relies on the safeguards offered by the provider and required by applicable law.

Local state and retention

The complete source PDF and generated edited PDF remain in browser memory during the standard beta flow. PatchPDF does not provide permanent cloud PDF storage or an account-based document history.

Operational logs, support messages, content-free product events, and security data are retained only for the documented operational or legal purpose, then deleted or anonymized. Exact provider retention may differ where the provider must preserve records by law.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information and to withdraw consent. Email hello@patchpdf.com. You may also complain to your local data-protection authority.

PatchPDF does not operate a promotional mailing list during the public beta.

Children

PatchPDF is not directed to children under 16 and does not knowingly collect their personal information.

Controller and contact

PatchPDF is the service name used by the operator responsible for this processing. Privacy and operator questions may be sent to hello@patchpdf.com.

Changes

Material changes will be dated and communicated through the service when appropriate. The effective date above identifies this version.