Privacy Policy

PixelToPdf is a service operated by the company identified below, registered in Spain. For any privacy-related inquiries, you can contact us using the details at the bottom of this page.

We collect the following categories of personal data:

• Account information: name, email address, and password hash when you create an account.
• Billing data: payment method details are processed and stored by our payment provider (Stripe). We only retain the last four digits of your card and billing address for invoice purposes.
• Usage data: API calls, conversion parameters, timestamps, IP addresses, and credit consumption.
• Technical data: browser type, operating system, device information, and referral URLs collected automatically when you visit our website.
• Support data: any information you provide when contacting our support team.

We process your personal data for the following purposes:

• Providing, maintaining, and improving the PixelToPdf service.
• Processing payments and managing your subscription.
• Sending transactional emails (account verification, password resets, billing notifications).
• Monitoring service usage to prevent abuse and ensure platform security.
• Complying with legal obligations applicable under Spanish and European Union law.
• Analyzing aggregated, anonymized usage patterns to improve our product.

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Contract performance: processing necessary to provide the service you signed up for (Article 6(1)(b)).
• Legitimate interest: analytics, fraud prevention, and service improvement (Article 6(1)(f)).
• Legal obligation: tax and accounting requirements under Spanish law (Article 6(1)(c)).
• Consent: marketing communications, where applicable (Article 6(1)(a)).

When you use the PixelToPdf API, your HTML content is processed on our servers to generate a PDF. Files are automatically deleted within 1 hour after the conversion is completed. We do not store, analyze, or share the content of your conversions.

Account data is retained for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., invoices are retained for 5 years under Spanish tax regulations).

We do not sell your personal data. We share data only with the following categories of service providers:

• Payment processing: Stripe, Inc. processes your payment information under their own privacy policy.
• Cloud infrastructure: our servers are hosted within the European Union.
• Email delivery: transactional emails are sent through a third-party provider.
• Analytics: we may use anonymized, aggregated analytics tools to understand usage patterns.

All third-party providers are bound by data processing agreements (DPAs) in compliance with GDPR requirements.

Your data is primarily stored and processed within the European Economic Area (EEA). If any data is transferred outside the EEA, we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

Under the GDPR, you have the following rights:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your personal data ("right to be forgotten").
• Restriction: request that we limit the processing of your data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us using the details below. We will respond within 30 days as required by law. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

Our website uses essential cookies required for the service to function properly. We may also use analytics cookies to understand how visitors interact with our website. You can manage your cookie preferences through your browser settings. For more details, see our cookie settings on the website.

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. Despite these measures, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

PixelToPdf is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or through a notice on our website. Your continued use of the service after any changes constitutes acceptance of the updated policy.

For any questions about this Privacy Policy or our data practices, contact us at: