Privacy Policy
Last updated: November 9, 2026
1. Who we are
This Privacy Policy explains how Right Skale (“we,” “us,” or “Operator”), operating the getpdf service at getpdf.dev (the “Service”), handles personal information. We are based in California, United States.
Contact for privacy requests: support@getpdf.dev
2. Scope
This policy covers personal information we collect when you visit getpdf.dev, request an API key, use the API, join a waitlist or interest form, or pay for a plan. It does not cover third-party sites we link to.
3. What we collect
Depending on how you use the Service, we may process:
| Category | Examples | Why |
|---|---|---|
| Account / contact | Email address, name if you provide it | Issue keys, communicate about the Service, Founding/interest lists |
| Authentication | API key identifiers; hashes of API keys (we aim not to store raw keys long-term) | Authenticate requests |
| Usage | Successful render counts, timestamps, error/status metadata, approximate quotas | Enforce free/paid limits, operate and secure the Service |
| Customer Content (transient) | Templates, HTML, JSON, and similar inputs you send to render | Produce a PDF response |
| Customer Content (stored by choice) | Template definitions you save via the templates API | Re-use templates on later renders |
| Billing | Plan selection, Stripe customer/subscription IDs, payment status; card data handled by Stripe | Charge paid plans |
| Technical | IP address, user-agent, request metadata, security logs | Abuse prevention, debugging, reliability |
| Communications | Emails you send to support | Respond to requests |
We do not sell personal information.
4. Rendered documents are not stored
PDF outputs are rendered in memory (or equivalent ephemeral processing), returned to you in the API response, and discarded. We do not keep a library of your rendered PDFs.
Template/input data is processed only as needed to render (and, if you use template storage, to store the template you asked us to keep). Do not send secrets in templates or data unless you accept the risk of transient processing.
5. How we use information
We use personal information to:
- Provide, maintain, and secure the Service
- Authenticate API calls and enforce quotas / rate limits / abuse controls
- Process payments via Stripe when you buy a paid plan
- Communicate service notices, security alerts, and (with consent or as allowed by law) product updates
- Comply with law and enforce our Terms
6. Legal bases (GDPR / UK GDPR, where applicable)
Where those laws apply, we rely on one or more of: contract (providing the Service you requested), legitimate interests (security, fraud prevention, product improvement in a privacy-respecting way), consent (where we ask for it), and legal obligation.
7. Processors and subprocessors
We use service providers that process data on our behalf, including:
- Cloudflare — hosting, CDN, Workers / Pages, related infrastructure (host / subprocessor)
- Stripe — payment processing for paid plans
These providers may process personal information in the United States or other countries where they operate. We use them to run the Service, not to sell your data.
8. Retention
- Rendered PDFs: not retained after the response is returned
- API usage counters / key records: retained while the account/key is active and for a reasonable period afterward for security, billing disputes, and legal compliance
- Saved templates: until you delete them or your account/keys are closed and purge schedules run
- Waitlist / support email: until you ask us to delete it or it is no longer needed
- Billing records: as required for tax, accounting, and dispute resolution
9. Security
We use technical and organizational measures appropriate to a small API service, including hashed API keys where implemented, sandboxed rendering, and blocking of private-network / metadata / file:// fetches in the render path. No method of transmission or storage is 100% secure.
10. Sharing
We share personal information only:
- With processors listed above (and similar replacements we may use with comparable purpose)
- If required by law, legal process, or to protect rights, safety, or security
- In connection with a merger, acquisition, or asset sale, subject to appropriate protections
- With your direction or consent
We do not sell personal information, and we do not share it for cross-context behavioral advertising as those terms are used under the CCPA/CPRA.
11. Your rights
GDPR / UK GDPR (if you are in the EEA, UK, or another jurisdiction with similar rights)
You may have the right to access, rectify, erase, restrict, port, and object to certain processing, and to withdraw consent where processing is consent-based. You may lodge a complaint with your local supervisory authority.
CCPA/CPRA (California)
California residents may have the right to know/access, delete, correct, and to non-discrimination for exercising privacy rights. We do not sell personal information or share it for cross-context behavioral advertising. To exercise rights, email support@getpdf.dev. We will verify requests as required by law. You may use an authorized agent as permitted by California law.
How to exercise
Email support@getpdf.dev with “Privacy request” in the subject. We may need to verify your identity (for example via the email on the account or proof of key ownership). We will respond within the time required by applicable law.
12. International transfers
We are based in the United States. If you access the Service from elsewhere, your information may be processed in the U.S. and other countries where our processors operate. Where required, we use appropriate transfer mechanisms relied on by our processors.
13. Children
The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child provided information, contact support@getpdf.dev and we will delete it.
14. Do Not Track / cookies
The marketing site is primarily static. We and our host (Cloudflare) may process standard request logs and security signals. If we add analytics or non-essential cookies later, we will update this policy and obtain consent where required.
15. Changes
We may update this policy by posting a new draft/version and revising the date. Material changes will be highlighted by email or site notice when practicable.
16. Contact
Privacy questions and requests: support@getpdf.dev
Operator: Right Skale
HQ: Pleasanton, CA