Your documents deserve professional care.

Anonymous patterns, not personal histories.

To suggest useful next steps, the Website can remember the last Quick Tool completed in the current browser tab. If a different tool is completed within two hours, the Website sends only the two tool identifiers, whether the next tool was opened from a recommendation, and a random one-time receipt used to prevent duplicate counting.

These recommendation records do not include document files or contents, filenames, file sizes, account identifiers, or a persistent browser identifier. Individual transitions are added directly to daily totals. One-time receipts expire after 48 hours, transition totals are retained for up to 35 days, anonymous recommendation snapshots are retained for up to 90 days, and the recommendations are recalculated once per day.

The Website does not collect these tool transitions when your browser sends a Global Privacy Control or Do Not Track signal. Curated recommendations remain available without behavioral collection.

Only what the product and its safeguards need.

Depending on the features you use, we may process documents and tool settings, account identifiers, subscription and entitlement status, usage limits, browser or device information, security signals, and diagnostics.

Account records contain your email address and account identifiers. Social sign-in can also supply a name and provider account identifier. When Google supplies a profile-photo URL during sign-up, our sign-in service stores that image reference with your account; this is separate from photos you scan or select for a document.

Stripe, Apple, or Google processes payment details for purchases made through its billing system. All You Can PDF stores the provider, purchase identifiers, product, payment or subscription status, renewal period where applicable, and entitlement records needed to provide and manage your plan, including one-time Lifetime purchases and refunds; it does not store complete card details.

Authentication session records retain your IP address and browser or app User-Agent information, linked to your account, to operate and protect sign-in sessions. Security and operational diagnostics can also include request URLs, timestamps, response status, request identifiers and error information. We use this information for authentication, fraud prevention, troubleshooting and service reliability, not to target advertising. These records are separate from temporary document files; deleting a conversion working file does not also erase service logs.

Local work and selected server conversions.

In the mobile app, Word, PowerPoint and Excel to PDF conversions, and PDF to PDF/A conversion, send the document you select and its filename to our conversion service when you confirm processing. The service checks your account entitlement and passes the selected file to a conversion processor. These conversions use temporary server working files rather than adding documents to a permanent server document library.

The processor runs working-directory cleanup when a conversion completes or exits with an error. Unexpected service interruptions or cleanup failures can prevent normal removal, so this is not a guarantee of immediate erasure. Hosting and security providers may separately retain request metadata and operational logs according to their service configuration and privacy policies; that retention is not determined by document cleanup.

The mobile app may keep private working copies of selected or generated files on your device. To recover an unsaved result after interruption, it also keeps a local recovery record containing file names, types, sizes, timestamps and internal references. A recovered result is not a new cloud backup. Files you explicitly save to your device, iCloud Drive or another connected storage service remain in that destination under your control.

Cloudflare Turnstile protection.

Our account flows use Cloudflare Turnstile to help detect automated abuse, including a security page embedded in the mobile app. According to Cloudflare, Turnstile processes connection and browser signals such as an IP address, User-Agent, TLS fingerprint, and the site key and associated origin. Cloudflare describes these uses as detecting and blocking bots and improving its bot-detection capabilities, rather than advertising targeting.

This security processing is separate from document conversion and from advertising. Cloudflare explains its handling of these signals in the Turnstile Privacy Addendum and Cloudflare Privacy Policy. Temporary document-file cleanup does not determine Cloudflare’s retention of security signals.

You choose what to open and what to save.

If you connect Google Drive, All You Can PDF accesses your Google account identifier, name, email address, Drive file and folder metadata, and the content of files you explicitly select. We use that information only to show your Drive browser, open the files you choose in a Quick Tool, save outputs you explicitly send to Drive, maintain the connection, and protect the service.

The connection record is linked to your All You Can PDF account and includes the connected Google account, granted permissions, connection status and timestamps. When you download from or upload to Drive through the app, we update a last-used timestamp to maintain the connection’s activity information; it is not a record of the contents of that file.

Google access and refresh credentials are encrypted and retained while your Drive connection remains active. The connected-storage service does not create a permanent mirror of your Drive or retain selected file contents in its connection records. If a selected tool clearly says it needs temporary server processing, its disclosed temporary-file rules also apply. Disconnecting Drive clears the stored credentials and requests revocation from Google; it does not delete files in your Drive.

We do not sell Google user data, use it for advertising, or transfer it to data brokers. We do not permit a person to read your Google files unless you affirmatively ask for support involving a specific file, access is necessary to investigate abuse or a security incident, or disclosure is required by law. All You Can PDF’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

You choose what to open and what to save.

If you connect Dropbox, All You Can PDF accesses your Dropbox account identifier, name, email address, file and folder metadata, and the content of files you explicitly select. We use that information only to show your Dropbox file browser, open the files you choose in a Quick Tool, save outputs you explicitly send to Dropbox, maintain the connection, and protect the service.

Dropbox access and refresh credentials are encrypted and retained while your connection remains active. The connected-storage service does not create a permanent mirror of your Dropbox or retain selected file contents in its connection records. If a selected tool clearly says it needs temporary server processing, its disclosed temporary-file rules also apply. Disconnecting Dropbox clears the stored credentials and requests revocation from Dropbox; it does not delete files in your Dropbox.

We do not sell Dropbox user data, use it for advertising, or transfer it to data brokers. We do not permit a person to read your Dropbox files unless you affirmatively ask for support involving a specific file, access is necessary to investigate abuse or a security incident, or disclosure is required by law.

Separate from your documents.

Third-party advertising is disabled in the current Website configuration. Mobile advertising and affiliate placements are also disabled in the current mobile release, which does not load a third-party advertising SDK. We will update this policy and the relevant consent and store disclosures before activating a provider. Preparing code for a possible provider does not mean its ads or tracking are active.

If affiliate links are enabled on the Website in a future configuration, Guest and Free experiences may show clearly labelled Amazon links. No request is sent to Amazon merely because a link is displayed. If you choose a link, your browser or the Amazon app opens a tagged Amazon destination; Amazon may receive the referral tag, the requested page, and ordinary connection or device information and handles that activity under its own privacy notice. We may receive aggregate referral and commission reporting.

Document files and document contents are not shared with advertising or affiliate providers and are not used to choose ads or recommendations. Premium subscribers receive an ad-free experience without affiliate placements, and the Windows and macOS applications do not include either. Advertising and affiliate placements are disabled in the current mobile release, which does not load a third-party advertising SDK.

If advertising is enabled later, the Website will identify the active provider and its privacy notice and offer any required consent controls before loading ads. Advertising providers may use cookies, local storage, IP addresses or similar identifiers to deliver and measure ads. Premium access will continue to exclude advertising and affiliate placements.

Purpose-limited access and meaningful choices.

We use service providers for hosting and security, account and product records, payment processing, advertising, and affiliate measurement. They receive only the information needed for their role and operate under their own terms and privacy obligations.

You can manage or cancel a recurring subscription through its billing provider from your account, disconnect linked storage, and delete your account. A one-time Lifetime purchase does not renew. Where advertising is enabled in a future release, its privacy controls will explain how to manage consent. Legal rights may also apply depending on where you live.

Account deletion removes your account and connected product data. A limited provider purchase reference may remain without your profile or contact details to prevent a store purchase from being claimed by a different account and to protect against entitlement fraud. Files already saved to your device or your own cloud storage are not deleted.

A clear place to begin.

For privacy questions or requests, visit Contact and support or email [email protected] with the subject “Privacy request.” We may need to verify that you control the relevant account before acting on a request.

We may update this policy as the product, service providers, or law changes. If a change materially affects how we handle personal information, we will provide reasonable notice through the Website, product, or account contact information. The effective date above identifies the current version.