View this page in English?
Voir cette page en français ?
هل تريد عرض هذه الصفحة بالعربية؟
RectoPDF
English

Privacy Policy

Last updated: 12 September 2026

Privacy is the foundation of RectoPDF, not an afterthought. This policy explains exactly what happens to your data: for the browser tools, nothing leaves your device; for audio transcription and the AI features, your data goes to our server only for as long as it takes to process it.

The browser tools

The PDF tools on RectoPDF (merge, split, compress, convert, OCR and the others) run entirely inside your web browser. When you open, convert or edit a file, the processing happens locally on your own device. Your files are never uploaded to us, never stored and never seen by anyone.

Because nothing is sent to a server, there is no file data for us to retain or disclose. Closing the tab clears everything. These tools set no cookies and use no local storage to track you.

Audio transcription and AI features

AI Audio Transcription works differently: speech recognition is too heavy for a browser, so your recording is sent over an encrypted connection to our server and processed by the speech-recognition and language models of our cloud infrastructure provider (Cloudflare). The audio and the transcript are used only to produce your result and are not kept once processing is complete; the transcript and the PDF are then assembled in your browser.

The optional AI features (transcript correction, translation, text correction after OCR) send the recognized text, and only the text, to the same infrastructure for the duration of the request. It is not kept afterwards.

To apply the free monthly allowance and your hours balance, we record how many seconds of audio your account transcribed and when. We do not keep what was said.

Accounts and sign-in

You need an account for AI Audio Transcription and for Pro features; the browser tools never ask you to sign in. If you create an account, we store the information you provide: your name and email address. If you sign in with Google, Google shares your name, email address and profile picture with us; we do not receive your Google password.

Signing in sets a single sign-in cookie so your session stays active. It is used only to keep you logged in, never for advertising or cross-site tracking. Your browser also keeps a small local marker (your initial and whether you are Pro) so the header displays your account without a flash, and, when you sign in from a tool, a temporary local copy of the file you had selected so it is still there when you come back. Both live only on your device.

We send transactional emails (email verification, password reset, receipts) needed to operate your account.

Payments

Purchases are processed by Polar Software Inc. (polar.sh), our merchant of record. Polar collects your payment details, billing address and the information needed to apply sales tax or VAT, and issues your receipts. We never see your card number. Polar's privacy policy applies to that data.

From Polar we receive your customer identifier, the product bought, the amounts and the status of your orders and subscription. We store your hours balance and a ledger of grants, top-ups, usage and refunds, which we keep as long as your account exists and, for accounting purposes, as long as the law requires.

Analytics

We use a privacy-friendly, cookieless analytics tool to count page views and understand which tools are popular. It sets no cookies, does not track you across other websites and does not build an advertising profile. We also record anonymous usage events (which tool was used, coarse file-size ranges, whether a conversion started, finished or failed); never file names or contents. We never sell data, and there are no third-party ad networks on the site.

Bot protection

To protect the sign-up, sign-in, password-reset and contact forms from automated abuse, we use Cloudflare Turnstile. When you submit one of these forms, Cloudflare processes limited technical signals (such as your IP address and browser characteristics) to confirm you are human. Please see Cloudflare's privacy documentation for details.

Where your data is processed

CSWon LLC is based in the United States and our providers (Cloudflare, Polar) operate in the United States and the European Union. Where required, transfers rely on standard contractual clauses or equivalent safeguards.

Your choices and rights

You can request access to, correction of, or deletion of your account data at any time, and, where applicable, exercise your rights under the GDPR or the UK GDPR. To close your account or make a privacy request, contact us through the contact page.

Data controller: CSWon LLC, State of Wyoming, United States.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.