Last updated: September 26, 2026
Controller
The data controller for the PDFAnvil application, website and account is AVRO IT, Przelotowa 188A, 42-523 Dąbrowa Górnicza, Poland, VAT ID (NIP): PL6292383961. Contact: [email protected].
The short version
Your PDF files are never uploaded to our servers. All document processing happens locally on your device. We only process the minimum account data needed to provide your account and licenses. Payments are handled by Link and Stripe, who act as independent controllers for your payment data.
What we process, why, and for how long
- Account data (e-mail, optional name, password hash, consents with timestamps) — to provide your account and licenses (contract performance, Art. 6(1)(b) GDPR). Kept until you delete your account. No later than 31 days after deletion we permanently erase your e-mail address, name and password hash. We retain the payment and subscription records and identifiers necessary to meet our legal accounting and tax obligations until the applicable tax limitation period expires, generally five years from the end of the calendar year in which the related tax payment deadline expired. This period may be extended where required by law, including where the limitation period is suspended or interrupted (Polish Tax Ordinance, Art. 70 and Art. 86 § 1). These retained records may still be linked to you through our payment providers and are not anonymous.
- Purchase data we receive from Stripe (e-mail, plan, country, payment status, amounts, transaction and subscription identifiers, license keys) — to deliver and manage your license and to meet accounting obligations (Art. 6(1)(b) and (c)). Kept for the statutory accounting period.
- Device and activation data (a hashed device identifier linked to your licence, device name and type, activation and last-seen timestamps, IP address and user-agent) — to manage device activations, enforce licence limits and protect the licensing service against abuse (legitimate interest, Art. 6(1)(f)). Kept while your account exists; permanently deleted no later than 31 days after you delete your account.
- Error reports (crash data via Sentry, EU region — Germany) — sent from the application only if you opt in to analytics inside the application (consent, Art. 6(1)(a)); you can withdraw consent at any time in Settings. Reports never contain your documents; IP addresses are not stored with events and file paths are stripped before sending. Retained for 30 days.
- Optional usage analytics — only if you opt in inside the application; anonymous feature-usage counts, no document content.
Data stored locally on your device (documents, annotations, signatures, settings) never reaches us and remains under your control.
Purchases through Link
Purchases of paid plans are processed by Sold through Link, LLC (USA), a Stripe affiliate acting as merchant of record (see Terms, section 2). At checkout, Link and Stripe collect the data needed to take your payment, prevent fraud and calculate and report sales tax or VAT — for example your name, billing address, country, e-mail address and payment method. Link and Stripe process this data as independent controllers under their own privacy policies (Link Privacy Policy and Stripe Privacy Policy). We do not receive your full card number.
From Stripe we receive the purchase data listed above, which we need to deliver your license and to keep accounting records. Under Link's terms, Link may also share order details with us as the business you bought from; we use them only for the purposes described in this policy.
Recipients
- Sold through Link, LLC and Stripe — checkout, payments, tax, receipts and invoices (independent controllers, see above)
- Hetzner Online GmbH (Germany, EU) — hosting of our API and database (processor)
- Resend — transactional e-mail delivery (processor)
- Functional Software, Inc. (Sentry) — error reporting, data stored in the EU (Germany) (processor)
We do not sell data and do not use advertising networks. Where data is transferred outside the EEA, including to Link and Stripe in the United States, the transfer relies on the EU–US Data Privacy Framework where the recipient is certified, or on EU Standard Contractual Clauses.
Your rights (GDPR)
You can access, correct, export, restrict, object to, or delete your data. Write to [email protected] from the e-mail address of your account. A copy of your data includes your account details, licences, recorded payments and subscriptions, activated devices and consent timestamps; you may also request access to any additional personal data we hold about you. After verifying your deletion request, we will disable your account, revoke its sessions, licences and device activations, and arrange cancellation of recurring charges with Link. We will confirm when these steps have been completed. Personal data will then be erased according to the retention periods described above; records we must keep under accounting and tax law remain for the statutory period and are not anonymous. For payment data held by Link or Stripe, you can exercise your rights directly with them, or write to us and we will pass your request on.
You have the right to lodge a complaint with your supervisory authority (in Poland: PUODO, uodo.gov.pl).
Cookies
This website sets no analytics or advertising cookies. The application uses browser storage (localStorage, IndexedDB) strictly to run the product — your settings, licenses and locally stored documents. The checkout page is operated by Stripe and may use cookies necessary for payment and fraud prevention, as described in Stripe's cookie policy.
Changes
We will announce material changes to this policy by e-mail to account holders and on this page.
Contact
[email protected]AVRO IT, Przelotowa 188A, 42-523 Dąbrowa Górnicza, Poland