Privacy Policy

Last updated: June 23, 2026

IndyPDF ("IndyPDF," "we," "us," or "our") operates the website indypdf.com, the IndyPDF desktop application for Windows and macOS, and the Indy PDF mobile app for Android and iOS. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Summary

Desktop PDF editing is local. Your documents are processed on your device. We do not upload your PDF files to our servers for normal editing, viewing, or saving.
Website accounts store your email and purchase/license information so you can activate the desktop app.
Optional cloud features (Google Drive, OneDrive, Azure OCR, AI assistants) may send data to third-party services you choose to connect.
Mobile cloud backup is optional. Scanning and OCR work offline; documents are uploaded to IndyPDF only if you create an account and choose to back them up. You can delete your account and all backed-up files at any time.

Information we collect

Website and account

When you create an account or purchase a license, we may collect:

Name (optional)
Email address
Password (stored as a secure hash)
Purchase and license records (via our payment processor, Stripe)
Support correspondence you send us

Desktop application

The IndyPDF desktop app generally does not transmit document contents to IndyPDF. We may collect or store locally on your device:

License activation status and machine identifier used for license validation
Application settings and preferences
Optional audit logs you enable (stored locally on your device)
Recent files list (stored locally; optional sync to a folder you choose)

When you activate a license, the app contacts indypdf.com to validate your license key and machine binding. This includes your license key and a device fingerprint — not your PDF files.

Mobile app and cloud backup

The Indy PDF mobile app scans documents and performs OCR on your device. It does not require an account to scan. If you create an account and enable cloud backup, the app uploads the documents you choose to our servers so you can access them across devices. For this we store:

Your email address and a securely hashed password
The PDF documents you upload for backup, plus their titles and page counts
Storage usage and plan information

Uploaded documents are transmitted over HTTPS and stored in your private, per-account folder on our servers. We do not use the contents of your documents for advertising and do not sell them.

Optional cloud sign-in (Google Drive & OneDrive)

If you choose Open from Cloud, IndyPDF uses OAuth to connect to Google or Microsoft on your behalf. OAuth tokens are stored locally on your device. PDFs you open from cloud storage are downloaded to a local cache on your device for editing. If you save changes, the app uploads the updated file back to your cloud account using the provider's API. IndyPDF does not receive or store your cloud passwords.

Optional third-party services you configure

If you enable optional features, data may be sent directly from your device to:

Google, Microsoft, or other cloud providers (Drive / OneDrive access you authorize)
Azure Document Intelligence (if you enter your own Azure OCR endpoint and API key)
AI providers such as OpenAI, Google Gemini, or Anthropic (if you enter your own API keys)

Those services are governed by their own privacy policies.

Website usage data

Like most websites, we may collect standard server logs (IP address, browser type, pages visited, timestamps) for security, analytics, and troubleshooting. We do not sell your personal information.

How we use information

Provide, maintain, and improve IndyPDF products and the website
Process purchases and deliver license keys
Validate licenses and prevent fraud or abuse
Respond to support requests
Send transactional emails (receipts, license delivery, account notices)
Comply with legal obligations

How we share information

We may share information with:

Service providers that help us operate the website (hosting, email, payment processing). Stripe processes payments; see Stripe's Privacy Policy.
Cloud providers you connect when you use optional cloud features, as directed by you.
Authorities when required by law or to protect our rights and users.

We do not sell personal information to third parties.

Data retention

We retain account and license records for as long as your account is active or as needed to provide services, comply with law, resolve disputes, and enforce agreements. You can delete your account and data at any time as described below.

Account and data deletion

You can permanently delete your IndyPDF account and the data associated with it. Deletion removes your account, any documents you uploaded for cloud backup, and your stored license and purchase records. Documents kept only on your device are not affected, and scans you have already exported or shared elsewhere remain wherever you sent them.

On the web: visit indypdf.com/account/delete, sign in, confirm your password, and follow the prompts.
In the mobile app: open the Cloud & Account tab and tap Delete account.
By email: contact support@indypdf.com and we will delete your account on your behalf.

Deletion takes effect immediately and cannot be undone. Some records may be retained where required by law (for example, payment and tax records held by our payment processor, Stripe), and routine backups containing your data are purged on a rolling basis.

Security

We use reasonable administrative, technical, and organizational measures to protect information. No method of transmission or storage is 100% secure. Keep your license key and account credentials confidential.

Your choices

Do not create a website account if you only use the desktop trial without purchasing
Do not enable cloud sign-in or third-party API features if you prefer fully offline use
Deactivate your license from the dashboard to transfer it to another PC
Contact us to access, update, or delete account information where applicable

Children

IndyPDF is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.

International users

If you access our website from outside the United States, your information may be processed in the United States or other countries where our service providers operate.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact us

Questions about this Privacy Policy or your data: