1. Introduction
This Privacy Policy explains how Bootstrapper LLC (“Bootstrapper LLC,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with PDFgen — our website, applications, and API (collectively, the “Service”). By using the Service, you agree to the practices described here. This Policy should be read together with our Terms of Service.
2. Information We Collect
Information you provide
- Account information — your email address and, depending on your sign-in method (email, Google, or GitHub), basic profile details provided by that identity provider.
- Content — the prompts, data, uploaded images, and templates you submit, and the documents generated from them.
- Payment information — when you subscribe, payment is processed by Stripe. We receive limited billing details (such as plan, status, and the last four digits of your card) but do not store full card numbers.
- Communications — information you provide when you contact support or correspond with us.
Information we collect automatically
- Usage and API logs — records of requests, including API key identifiers, endpoints called, credits consumed, timestamps, and status, used for billing, security, and rate limiting.
- Device and log data — IP address, browser type, and similar technical information collected automatically by our servers and hosting provider.
- Cookies — used for authentication, session management, and analytics (see Section 7).
3. How We Use Information
We use information to:
- provide, operate, maintain, and improve the Service;
- authenticate you, process AI generations, and render and deliver your PDFs;
- process payments, manage subscriptions, and meter credit usage and rate limits;
- send transactional messages, such as sign-in links and account or billing notices;
- monitor for, detect, and prevent fraud, abuse, and security incidents;
- analyze usage to understand and improve features and performance; and
- comply with legal obligations and enforce our Terms.
4. AI Processing
To generate templates and content, your prompts and related inputs are sent to third-party AI model providers that perform inference on our behalf. We share only what is needed to produce the output you request. We do not sell your content, and we do not use your content to train our own models. The AI providers process data under their own agreements and policies; we select providers that contractually limit their use of submitted data to providing the service.
5. How We Share Information
We do not sell your personal information. We share information only as follows:
- Service providers who process data on our behalf under contract (see Section 6);
- Your direction — for example, delivering generated PDFs to a storage destination you configure, such as your own S3 bucket;
- Legal and safety — when required by law, subpoena, or to protect the rights, property, or safety of Bootstrapper LLC, our users, or the public; and
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
6. Service Providers
We rely on trusted third parties to operate the Service. These currently include providers for the following functions:
- Cloud hosting and infrastructure — to run the application and store data;
- Database and file storage — to store your account, templates, and generated files;
- AI model inference — to generate templates and content from your prompts;
- Payments — Stripe, to process subscriptions and billing;
- Email delivery — to send sign-in links and transactional email;
- Authentication — Google and GitHub, when you choose those sign-in methods; and
- Analytics — to understand product usage.
These providers are authorized to use your information only to perform services for us. A current list of subprocessors is available on request at support@pdfgen.com.
7. Cookies and Analytics
We use cookies and similar technologies that are necessary to keep you signed in and to operate the Service, as well as analytics technologies to measure usage and improve the product. You can control cookies through your browser settings, though disabling some cookies may affect functionality, including the ability to sign in.
8. Data Retention
We retain personal information for as long as your account is active or as needed to provide the Service, and thereafter as necessary to comply with legal obligations, resolve disputes, prevent abuse, and enforce our agreements. Usage and API logs are retained for operational, billing, and security purposes. When information is no longer needed, we delete or de-identify it.
9. Security
We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit, access controls, and hashed or restricted handling of sensitive credentials such as API keys. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and API keys confidential.
10. Your Rights and Choices
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. If you are in the European Economic Area, the United Kingdom, or California, you may have additional rights under the GDPR, UK GDPR, or CCPA/CPRA, including the right not to receive discriminatory treatment for exercising your rights. We do not sell or “share” personal information for cross-context behavioral advertising. To exercise any right, email support@pdfgen.com; we may need to verify your identity before responding. You may also close your account at any time from your settings.
11. International Data Transfers
We are based in the United States and process information there and in other countries where our service providers operate. If you access the Service from outside the United States, you understand that your information may be transferred to and processed in jurisdictions that may have different data protection laws than your own, and we take steps to ensure appropriate safeguards for such transfers where required.
12. Children’s Privacy
The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take steps to delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.
14. Contact Us
Bootstrapper LLC is the controller responsible for your personal information in connection with PDFgen. If you have questions or requests regarding this Policy or your data, contact us at support@pdfgen.com.