Privacy Policy

Effective and last updated: 1 July 2026

1. Controller and contact

The controller for personal data processed through YourPDF.store is the Operator identified in section 16 of the Terms of Use. Privacy requests may be sent to support@yourpdf.store.

2. Data we process

• Seller account data: email address, public name or alias, password hash, account status, confirmation records and the country selected for payment onboarding.
• Stripe and payment status data: connected-account identifiers, onboarding status, currency and payment-related identifiers. Stripe separately collects identity, bank, tax and verification information required for its services.
• Product data: uploaded files, covers, titles, descriptions, categories, prices and publication status.
• Buyer and order data: purchase email, product, seller, price, currency, order status, payment identifiers, download token, refund or dispute status, the legal-text versions accepted at checkout, consent timestamps and cryptographic evidence hashes.
• Communications: support requests, complaints, reports and related correspondence.
• Technical and security data: IP address, user agent, session identifiers, timestamps, request logs and fraud or security signals. Checkout IP address and user agent may also be retained as evidence of terms acceptance and immediate-delivery consent.
• Optional analytics data: device, browser and usage information collected only after analytics consent.

3. Purposes and legal bases

• Contract: registration, account administration, listings, checkout, delivery, support, refunds and seller dashboards.
• Legal obligations: accounting, tax, consumer, payment, fraud-prevention and authority-request obligations where applicable.
• Legitimate interests: service security, abuse prevention, troubleshooting, moderation, dispute handling and improvement of core Platform operations, balanced against user rights.
• Consent: optional analytics and any other processing expressly presented as optional.

4. Required and optional data

Data marked as required is necessary to create an account, process an order, deliver a file or provide requested support. Without it, the relevant service cannot be provided. Analytics is optional and is not required to use the Platform.

5. Recipients and service providers

Data may be shared only as necessary with:

• Stripe for connected accounts, payment processing, refunds, disputes, fraud prevention and payouts;
• hosting, database, email, security and technical-support providers;
• the relevant seller where necessary to fulfil or support an order, resolve a complaint or comply with law;
• professional advisers, courts, regulators or authorities where legally required or necessary to establish, exercise or defend claims;
• Google Analytics only after analytics consent.

We do not sell personal data.

6. Stripe

Stripe processes payments and connected-account onboarding under its own legal and privacy responsibilities. Complete card details and Stripe verification documents are not stored by YourPDF.store. Stripe's privacy notice is available on Stripe's website.

7. Cookies and analytics

Essential cookies and similar storage are used for sessions, security and core functionality. Optional Google Analytics is loaded only after the user selects the analytics acceptance option in the cookie banner. The Platform remains usable without analytics consent. Consent may be withdrawn by clearing the stored cookie preference and browser storage, after which analytics should not be accepted again.

8. International transfers

Some service providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, standard contractual clauses or another lawful safeguard. Further information may be requested through the contact address above.

9. Retention

• Seller account and product data is retained while the account is active and afterwards where needed for completed transactions, disputes, security and legal obligations.
• Order, payment, seller-disclosure, checkout-consent, refund and accounting records are retained for periods required by applicable tax, accounting, consumer, payment and limitation rules.
• Support, complaint and moderation records are retained until resolved and afterwards where reasonably necessary for claims, abuse prevention or legal duties.
• Security logs are retained only for a period reasonably necessary for security and incident investigation.
• Analytics data is retained according to the configured analytics retention period or until deletion is required.

10. Security

We use reasonable technical and organisational measures designed to protect personal data, including access controls, password hashing, encrypted transport, restricted administration and service monitoring. No online service can guarantee absolute security.

11. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection. Where processing relies on consent, you may withdraw consent without affecting earlier lawful processing. You may also complain to the Polish supervisory authority or the competent authority in your country.

To exercise a right, contact support@yourpdf.store. Identity verification may be requested where reasonably necessary.

12. Automated decisions

YourPDF.store may use automated security, fraud or spam signals to assist review. The Platform does not intentionally make solely automated decisions producing legal or similarly significant effects without the safeguards required by applicable law.

13. Children

Seller accounts are limited to adults. The Platform is not directed to children for account registration and does not knowingly request personal data from children for that purpose.

14. Changes

Updated versions will be posted with a revised date. Material changes may also be communicated through the Platform or by email where reasonably practical.