Last updated: July 19, 2026
Controller
The data controller is Avro It Michał Marczak, Przelotowa 188A, 42-523 Dąbrowa Górnicza, Poland, VAT ID (NIP): PL6292383961. Contact: [email protected].
The short version
Your PDF files are never uploaded to our servers. All document processing happens locally on your device. We only process the minimum account data needed to sell and manage licenses.
What we process, why, and for how long
- Account data (e-mail, optional name, password hash, consents with timestamps) — to provide your account and licenses (contract performance, Art. 6(1)(b) GDPR). Kept until you delete your account; then removed or anonymised within 30 days, except data we must keep for tax/accounting law (up to 5 years).
- Purchase data (plan, payment history from Stripe, license keys, invoices) — contract performance and legal obligations (Art. 6(1)(b) and (c)). Kept for the statutory accounting period.
- Device identifiers (anonymous fingerprint per activated device) — to enforce per-plan device limits (legitimate interest, Art. 6(1)(f)). Removed with the license or on account deletion.
- Error reports (crash data via Sentry, EU region) — to keep the product working (legitimate interest). Reports never contain your documents; IP addresses are not stored with events and file paths are stripped before sending. Retained max. 90 days.
- Optional usage analytics — only if you opt in inside the application; anonymous feature-usage counts, no document content.
Data stored locally on your device (documents, annotations, signatures, settings) never reaches us and is under your control.
Processors and recipients
- Stripe — payment processing
- Hetzner Online GmbH (Germany, EU) — hosting of our API and database
- Resend — transactional e-mail delivery
- Sentry (EU region) — error reporting
We do not sell data and do not use advertising networks. Where a provider processes data outside the EEA, transfers rely on EU Standard Contractual Clauses.
Your rights (GDPR)
You can access, correct, export, restrict, object to, or delete your data. Self-service is built in: Account → Export my data downloads everything we hold about you; Account → Delete account removes your account, deactivates devices and cancels an active subscription. You can also write to [email protected]. You have the right to lodge a complaint with your supervisory authority (in Poland: PUODO, uodo.gov.pl).
Cookies
This website sets no analytics or advertising cookies. The application uses browser storage (localStorage, IndexedDB) strictly to run the product — your settings, licenses and locally stored documents.
Changes
We will announce material changes to this policy by e-mail to account holders and on this page.
Contact
[email protected]
Avro It Michał Marczak, Przelotowa 188A, 42-523 Dąbrowa Górnicza, Poland