StreamPDFStreamPDF
Legal

Privacy Policy

Last Updated: September 18, 2026

At StreamPDF, we respect your privacy and are committed to protecting your personal and document data. This Privacy Policy explains how we collect, handle, and safeguard your information when you interact with our platform.

1. Information We Collect

  • Account Information: Email address, user ID, and basic profile metadata provided during authentication.
  • Payment & Transaction Data: All payments and transactions are processed directly by our Merchant of Record (MoR) partners (e.g., Creem). StreamPDF does not collect, process, or store your credit card numbers or banking secrets.
  • Uploaded Document Data: PDF files, document objects, metadata, and slice caches that you explicitly submit to the Service for streaming or previewing.
  • Usage & Technical Metrics: IP address, browser type, device information, and diagnostic logs (e.g., HTTP range metrics, rendering performance).

2. How We Use Your Documents

  • Processing Only: Uploaded PDFs are processed strictly to generate byte-range indexes, decompressed object streams, and temporary viewable slices.
  • No AI Training: We NEVER sell, share, or use your uploaded documents or document metadata to train machine learning or AI models.
  • Automatic Deletion: All processed slices and intermediate storage artifacts are automatically purged from our cloud storage (Cloudflare R2) in accordance with our retention policy (or immediately upon manual deletion).

3. Third-Party Service Providers

To deliver our infrastructure, we work with industry-standard third-party sub-processors:

  • Cloudflare Inc.: Global Edge CDN, DNS, and encrypted R2 object storage.
  • Modal Labs Inc.: Cloud compute execution for document parsing and rendering.
  • Clerk / Authentication Providers: User identity and session validation.
  • Creem / MoR Billing: Global payment checkout, VAT/sales tax compliance, and payouts.

4. Data Security

We implement end-to-end industry-standard administrative, physical, and technical safeguards. All communications between your browser and our servers are encrypted via HTTPS. Access to cloud storage buckets is governed strictly by time-limited, pre-signed URL signatures.

5. Your Data Rights (GDPR & CCPA)

Depending on your location, you hold the right to:

  • Access and obtain a copy of the personal data we hold about you.
  • Request the correction or total deletion of your personal data and account history ("Right to be Forgotten").
  • Request account closure and full revocation of processing permissions.

To exercise any of these rights, please email jiangxuan986@gmail.com.