Privacy Policy

• Account information. When you sign in with Google, we receive your name, email address, and profile picture from Google. We use this to create your account and identify you. We never see or store your Google password.
• Files you upload. PDFs and other documents you upload to use a tool. Files are sent directly to encrypted cloud storage over HTTPS and are automatically and permanently deleted within 24 hours, whether or not you download the result. We never read, review, or reuse your file content beyond performing the action you request.
• AI processing content. If you use an AI feature (Summarize, Translate, PDF to Markdown), the extracted text of your document is sent to our AI provider, OpenAI, solely to generate the output you requested. See "Third-Party Service Providers" below.
• Usage and device data. IP address (used to enforce free-usage limits for signed-out visitors and to prevent abuse), browser type, and timestamps of actions.
• Payment information. If you subscribe to Premium, payment is processed entirely by Razorpay. We never receive, see, or store your card number, UPI ID, or bank details — only your subscription status and a payment reference ID.
• Preferences. Your selected language and light/dark theme, stored locally in your browser, not on our servers.

• Provide, maintain, and improve the Service
• Authenticate you and maintain your session
• Enforce free-tier usage limits and rate limits to keep the Service available and abuse-free
• Process payments and manage your subscription
• Send service-related communications, such as payment receipts or renewal notices
• Detect, prevent, and address technical issues, fraud, or abuse

We do not use your document content to train AI models, and we do not sell your personal information to anyone.

We share limited data with the following providers, each acting under their own privacy terms, solely to operate the Service:

• Google — authentication (Sign in with Google)
• OpenAI — processes extracted document text when you use an AI feature
• Razorpay — processes subscription payments
• Amazon Web Services (AWS) — hosts our file storage, backend infrastructure, and databases
• Our frontend hosting provider — serves the website itself

• Uploaded files and generated results: deleted automatically within 24 hours via storage lifecycle rules, regardless of download
• Account information: retained while your account is active; deleted on request
• Subscription and billing records: retained as required for accounting and legal compliance
• Usage and rate-limit counters: short-lived, typically expiring within 24–30 days

• All data in transit is encrypted via HTTPS/TLS
• Files upload directly to encrypted cloud storage using short-lived, single-use links
• Access to production systems is restricted and authenticated

No system is 100% secure; we follow industry-standard practices but cannot guarantee absolute security.

Depending on where you live — including under the GDPR for EU/EEA/UK residents, and applicable Indian data protection law — you may have the right to access, correct, or delete your data, object to or restrict certain processing, receive a portable copy of your data, or withdraw consent at any time. To exercise these rights, email nexapdf-ai@outlook.com. We will respond within a reasonable time and in accordance with applicable law.

You can use a limited number of tools without creating an account. We track this using your IP address only, to enforce the free-usage limit and prevent abuse. This is temporary and is not linked to any other personal information unless you sign in.

We use only strictly necessary cookies and browser local storage: a session cookie to keep you signed in, and local storage to remember your language and theme preference. We do not currently use advertising or analytics cookies. If this changes, we will update this policy and request your consent where required by law.

Our infrastructure may process and store data in regions outside your country of residence, including the United States and India. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.

The Service is not directed at children under 16, and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, provide additional notice such as an email or in-app notification.

Questions about this policy or your data? Email nexapdf-ai@outlook.com. See also our Terms of Service and Refund & Cancellation Policy.