Privacy policy
1. Who we are
Wispdf is run by Hermes Ventures Pvt Ltd, Bengaluru, Karnataka, India. We decide how and why your personal data is used, which makes us the data controller (the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023).
2. The short version
- On-device tools never upload your file. It stays in your browser and is gone when you close the tab.
- Server tools send your file to our servers only to run the tool, and delete it within 1 hour.
- We do not sell your data, show ads, or use your files to train AI.
- Our analytics use no cookies and do not identify you.
3. Your files
- On-device tools: your file is processed in your browser and never sent to us. The Privacy Monitor on each tool shows that no file was uploaded.
- Server tools: the file you choose is sent over an encrypted connection, processed, and deleted from our servers within 1 hour, together with the result.
- Saved files (when accounts are available): files you choose to save with "Save to Wispdf" are stored encrypted until you delete them, close your account, or after 90 days without any sign-in. Only you, and for Team plans the people you share with, can open them, through short-lived private links.
- AI tools: not available yet. When they open, we will name the AI provider here before any file is sent to it.
4. What we collect
- When you visit: your IP address, browser type and the pages you request, which our hosting provider handles to deliver the site and keep it secure. We keep server logs for up to 30 days.
- Usage counts: to apply free daily limits, we count tool runs against a one-way hashed form of your IP address or your account. We keep these counts for 90 days.
- Account details (when accounts are available): your email address, your name and picture if you sign in with Google, your plan, your settings and your saved files.
- Purchases: Paddle collects your payment and billing details as merchant of record. We receive your email, country, plan, order and subscription status, never your full card details.
- Messages: what you send when you email us.
- Newsletter or notify-me forms (when open): your email address and what you asked to hear about.
5. Analytics and error reports
We count page views with Cloudflare Web Analytics, which uses no cookies and does not track you across sites or build a profile of you. If we turn on error reporting or product analytics, they will receive only technical details, with file names, file contents and form data removed before anything is sent, and we will list the provider in section 8 first.
6. How we use data, and why
- To run the tools and your account (performing our contract with you).
- To enforce plan limits, prevent abuse and keep the Service secure (our legitimate interests, and for Indian users, legitimate uses permitted by law).
- To process payments, renewals, tax and accounting through Paddle (contract and legal obligations).
- To send sign-in codes, renewal reminders and service messages (contract). We send newsletters only if you ask for them, and you can unsubscribe in one click (consent).
- To comply with the law and respond to lawful requests (legal obligation).
We do not sell or rent personal data, we do not "share" it for cross-context behavioral advertising, and we do not use it for automated decisions with legal effects on you.
9. Where data is stored and international transfers
We are based in India and our providers operate in several countries, including the United States and the European Union. When personal data from the EU, UK or Switzerland is transferred to countries without an adequacy decision, we rely on Standard Contractual Clauses or an equivalent safeguard. Transfers from India follow the DPDP Act and any restrictions the Government of India notifies.
10. How long we keep data
| Data | Kept for |
|---|---|
| Files in on-device tools | Never sent to us |
| Files in server tools and their results | Deleted within 1 hour |
| Saved files | Until you delete them, close your account, or 90 days without sign-in |
| Account details | Until you close your account, then removed from backups within 30 days |
| Usage counts | 90 days |
| Server logs | 30 days |
| Order and invoice records | 8 years, as Indian accounting law requires |
| Newsletter list | Until you unsubscribe, or 24 months without activity |
| Emails with us | 2 years after the conversation ends |
11. Your rights
Depending on where you live, you can ask us to: tell you what data we hold and give you a copy; correct it; delete it; move it to another service; object to or restrict how we use it; withdraw consent you gave; and appoint someone to act for you. Account holders can export and delete their data from account settings. For anything else, use "Email us" from the email address on your account. We reply within 30 days. If you are not satisfied, you can complain to your data protection authority, or in India to our Grievance Officer and then to the Data Protection Board of India. Residents of California and other US states with privacy laws have the same rights, and we will not treat you differently for using them.
12. Security
We use encryption in transit (HTTPS with HSTS) and at rest, strict security headers, private short-lived links for stored files, least-privilege access, and regular security reviews. No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.
13. Children
Wispdf is not directed at children under 13, and accounts are for people 18 and over. If you believe a child has given us personal data, contact us and we will delete it.
14. Changes to this policy
We may update this policy. For changes that matter, we will show a notice on the site and email account holders before the change takes effect.
15. Grievance Officer and contact
Grievance Officer: Hermes Ventures Pvt Ltd, Bengaluru, Karnataka, India · Email us