Legal
Privacy Policy
What PDFops actually stores, why, and what it deliberately never keeps. Written from the system as built, not from a template. Last updated 2026-07-21.
Your PDFs are never stored
Documents you send to /api/fill-form and
/api/merge — and through the
playground, which calls the same API — are
processed entirely in memory: the request bytes are
parsed, filled or merged, and the result is returned in the response.
Nothing is written to disk, object storage, or a database, and
document contents are not logged. Once the response is sent, the
data is gone.
Email addresses
We store your email when you give it to us — requesting an API key on the pricing page or sending feedback — and use it for account purposes (delivering and rotating your key, quota and pricing notices) and contact purposes (product updates). Signup events also raise an internal operations notification that includes the email, so a human can follow up.
Update emails go through a Resend mailing list; every one includes an unsubscribe link, and unsubscribing never affects your API key. You can also just reply or write hello@pdfops.dev to be removed.
Payments
Payments for paid plans are processed by Stripe, on Stripe-hosted pages — your card details never touch PDFops servers. What we store on our side is the Stripe customer id, your plan tier, and your billing email, so we can match payments to API keys and quotas.
IP addresses: hashes only
Rate limiting (the anonymous 100/IP/month trial, the signup cap) and aggregate usage telemetry need to tell callers apart. For that we store a SHA-256 hash of your IP address with a counter — the raw IP itself is never written to our database. A hash lets us count "same caller this month" without keeping an address book of visitors.
Analytics
Pages load Vercel Web Analytics, which counts page views without cookies and without tracking individual visitors across sites. We see aggregate numbers (views, referrers, countries), not profiles.
Where data lives
- Vercel hosts the site and runs the API at the edge.
- Turso is the database holding emails, hashed-IP counters, and API-key records (keys themselves are stored hashed, too).
- Resend sends email and holds the mailing list.
These providers process data on our behalf under their own security practices; none of them receives your PDF contents, because PDF contents are never persisted anywhere.
Your choices
- Use the API without any account. The anonymous trial needs no email — the only trace is a hashed-IP counter.
- Unsubscribe from update emails via the link in any of them.
- Delete your data. Email hello@pdfops.dev from your account address and we'll revoke your key and remove your email from the database and mailing list.
Changes
If what the system stores changes, this page changes with it — the "last updated" date above tells you when. Material changes are announced to keyed users by email.
Contact
Privacy questions: hello@pdfops.dev. Usage rules live in the terms of service.