How we collect, use, and protect your data — in clear English, not legalese. The short version: we don't sell your data, we don't train on your documents, and we delete files automatically after your retention window.
Introduction
Quantum4U Lab Pvt. Ltd. ("we", "our", "us") operates PDFPilot4U at https://pdfpilot4u.com (the "Platform"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Platform.
By accessing or using PDFPilot4U, you agree to the practices described in this Policy. If you do not agree, please discontinue use of the Platform.
Information We Collect
Account Information
- Name and email address when you create an account.
- Password (stored as a one-way cryptographic hash — never in plain text).
- Profile details you choose to provide.
Uploaded Documents
- PDF files and other documents you upload for processing.
- Any content contained within those files (text, images, metadata).
Usage Data
- Information about how you interact with the Platform, including tools used, processing history, and feature usage.
- Session duration, pages visited, and click data.
- Analytics data collected via Google Analytics 4 (GA4), including pages viewed, events triggered (such as file uploads and tool usage), approximate geographic location (country/city), device type, browser, and operating system. This data is pseudonymous and does not include the content of your documents. See Section 8 for details on how to opt out.
Payment Information
- Billing details (name, email, billing address) collected at checkout.
- Transaction ID, amount, plan, and payment date retained for our records.
- We do not store your card number, CVV, UPI PIN, or any banking credentials. All payment data is handled directly by Razorpay.
Device Information
- Browser type, operating system, IP address, and device identifiers.
- Referring URL and timestamp information.
How We Use Your Information
- To provide, operate, and improve the PDFPilot4U Platform and its features.
- To process your payments securely through Razorpay.
- To send transactional emails — receipts, subscription confirmations, password resets.
- To respond to your support queries and feedback.
- To detect, investigate, and prevent fraud, abuse, and security threats.
- To analyse usage trends and improve our tools and user experience.
- To comply with applicable Indian laws and regulatory obligations.
- To send marketing communications, only if you have explicitly opted in. You may opt out at any time by clicking "Unsubscribe" in any email.
Document Processing & Storage
When you use our PDF tools or AI features, you upload documents to our servers for processing. We treat your documents with strict confidentiality.
- Guest sessions (no account): Files are automatically deleted within 24 hours of upload.
- Registered users: Files are retained while your account is active and deleted within 30 days of account deletion.
- We never use your uploaded documents to train our AI models.
- Files are encrypted in transit using TLS 1.3 and at rest using AES-256.
- Our AI features (summarise, translate, extract, chat) may transmit document content to third-party AI APIs solely to process your request. These providers are bound by strict confidentiality obligations.
- You are responsible for ensuring you have the legal right to upload any document you submit to our Platform.
Payment Processing — Razorpay
All payments on PDFPilot4U are processed by Razorpay (Razorpay Software Private Limited), our authorised payment gateway.
- Your card details, UPI ID, or banking credentials are entered directly on Razorpay's secure, PCI-DSS-certified checkout interface.
- We never see, receive, or store your raw card number, CVV, or net banking credentials.
- Payment data is encrypted using PCI-DSS (Payment Card Industry Data Security Standard) protocols.
- We collect and retain only: transaction ID, amount, plan purchased, payment date, and status — used for billing, refunds, and compliance.
- Razorpay processes your payment information in accordance with their Privacy Policy at razorpay.com/privacy.
- By making a payment, you authorise Razorpay to process the transaction on our behalf.
Data Sharing
We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:
- Razorpay — for payment processing as described in Section 5.
- Google LLC (Google Analytics 4) — we share pseudonymous usage data (pages visited, events, device type, approximate location) with Google Analytics to understand how users interact with the Platform. Google may process this data on servers outside India. You can opt out via browser settings, the Google Analytics Opt-out Browser Add-on, or by disabling analytics cookies. Google's privacy policy is available at policies.google.com/privacy.
- Cloud infrastructure providers — for hosting and data storage (servers in India).
- AI service providers — certain AI features transmit document content to third-party APIs solely to fulfil your request. These providers are contractually bound not to use your data for any other purpose.
- Legal requirement — if required by law, court order, or a government authority under applicable Indian law.
- Business transfer — in the event of a merger, acquisition, or asset sale, you will be notified of any change in data ownership before it takes effect.
All third-party providers are required to process your information only as instructed by us.
Your Rights
You have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Deletion — request deletion of your personal data, subject to legal retention obligations.
- Withdrawal of consent — opt out of marketing communications at any time.
- Data portability — request your data in a structured, machine-readable format.
To exercise any of these rights, email support@pdfpilot4u.com with the subject line "Data Request". We will respond within 30 days.
Cookies
We use cookies and similar technologies to operate and improve the Platform:
- Essential cookies — required for the Platform to function (session management, authentication). Cannot be disabled.
- Analytics cookies (Google Analytics 4) — we use Google Analytics 4 to collect pseudonymous data about how users interact with our Platform, such as pages visited, tools used, session duration, and events like file uploads. GA4 uses cookies including
_ga,_ga_XXXXXXXX, and_gidto distinguish users and sessions. This data is sent to Google LLC and may be processed outside India. IP addresses are anonymised by default in GA4. We do not send any document content or personally identifiable information to Google Analytics. - Preference cookies — remember your settings and preferences across visits.
You can control or disable analytics cookies at any time through your browser settings, or by installing the Google Analytics Opt-out Browser Add-on. Disabling essential cookies may affect Platform functionality. We do not use cookies for targeted advertising.
Security
We implement industry-standard security measures to protect your data:
- TLS 1.3 encryption for all data in transit.
- AES-256 encryption for data at rest.
- Role-based access controls for our team members.
- SOC 2 Type II compliant infrastructure.
- Regular security audits and vulnerability assessments.
While we take all reasonable precautions, no method of internet transmission is 100% secure. In the event of a data breach, we will notify affected users and relevant authorities as required by applicable Indian law.
Data Retention
| Data Type | Retention Period |
|---|---|
| Guest session files | Deleted within 24 hours of upload |
| Registered user files | Retained while account is active; deleted within 30 days of account deletion |
| Account data (name, email) | Retained for account lifetime + 90 days after deletion |
| Payment records (transaction ID, amount, date) | 7 years, as required under Indian tax and accounting laws |
| Log data (IP address, usage data) | Up to 12 months |
| Google Analytics data (_ga, _gid cookies) | Up to 14 months (configured in GA4); cookie expires after 2 years or 24 hours respectively |
Children's Privacy
PDFPilot4U is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information, please contact us at support@pdfpilot4u.com and we will delete it promptly.
Third-Party Links
Our Platform may contain links to third-party websites or services (such as Razorpay's checkout or AI provider documentation). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify registered users by email at least 7 days before the change takes effect.
Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.
Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Email: support@pdfpilot4u.com
Address: Sector 49, Gurugram, Haryana, India
Website: pdfpilot4u.com/contact
Response time: Within 2 business days