Legal
Privacy policy
We collect what we need to run the documents you work on, and nothing for advertising. Your documents are yours: we don't sell them, read them, or use them to train AI.
In your browserNever uploaded
Merge, split, rotate, images ↔ PDF and more run on your device.
Your private workspaceEncrypted at rest
Edits, fills and signatures are stored so you can come back; reachable only through short-lived signed links.
Our conversion serversOutput to your storage
Office conversion, compression, OCR, redaction and scan cleanup run in isolated containers.
AI providersNot used for training
AI features send document text (or page images for scan restoration) — only what the feature needs.
Who we are
AI Generated Inc. operates pdfbetter.com and the PDFBetter apps, and is the controller of the personal data described here. Our postal address is AI Generated Inc., 1606 Headway Circle, Austin, TX 78754, United States. Contact us about privacy at support@pdfbetter.com.
What we collect
- Documents and their contents that you upload, create or receive for signature — to provide the service.
- Account details: name, email, password hash or Google sign-in identifier, saved signatures, team membership.
- Workflow records: signature requests, recipients' names and emails, signing events with IP address and browser, form responses, share links.
- Billing records: plan, invoices and payment status from Stripe (not card numbers).
- Usage records: which tools were used and whether tasks completed, to measure and improve the product. These records never include document contents, field values or recipient emails.
- Technical data: IP address, browser type and security logs, kept to protect the service.
- Website analytics (Google Analytics, only with consent where the law requires it; see below): pages viewed, with ids in app addresses masked and query strings removed except campaign tags; the site that referred you; device, browser and approximate location that Google derives from your IP address; and funnel steps such as starting a tool, opening Download, starting checkout or completing a purchase (plan and amount). Signed-in accounts are linked by a one-way hash of our internal account id. Analytics never receives document names or contents, form values, recipients, or your email address, and it never runs on signing, shared-document, public-form or phone-capture pages.
Why we use it
- To provide the features you ask for (contract).
- To keep the service secure, prevent abuse and enforce plan limits (legitimate interests).
- To understand which pages and tools help people, with Google Analytics: on the basis of your consent in the EU, EEA, UK and Switzerland, and of our legitimate interests elsewhere, where you can opt out at any time.
- To keep legally required records such as invoices (legal obligation).
- To send transactional emails about your documents and account. We don't send marketing email without your consent.
Service providers
These companies process data on our behalf, only for the purpose listed:
| Provider | Purpose |
|---|---|
| Vercel | Hosting of the website and application |
| Cloudflare | File storage (R2), document conversion, email delivery, bot protection |
| Our managed PostgreSQL database | Account, document metadata and workflow records |
| Stripe | Payments and invoices |
| OpenAI | AI features you choose to use (document text) |
| fal.ai | Scan restoration you choose to use (page images) |
| Telnyx | Fax delivery you choose to use |
| Sign in with Google, if you choose it | |
| Google LLC (Google Analytics 4, via Firebase) | Website analytics: only after you accept in the EU, EEA, UK and Switzerland; elsewhere until you opt out |
How long we keep it
- Guest drafts (documents created without an account): 1 hour after they're created.
- Files uploaded only to run a tool, and guest tool results: 24 hours.
- Account documents: until you delete them; then purged within 30 days.
- Completed signatures: the sealed signed PDF, the Certificate of Completion and the audit trail are kept for 7 years after the request is completed, even if the sender deletes the document or their account, so everyone who signed can still prove the agreement. Records of requests that were never completed are deleted together with the document.
- Usage records: up to 400 days. Billing records: as long as tax law requires.
- Google Analytics: its cookies expire after 13 months; event data is kept in Google Analytics for no longer than 14 months, then deleted by Google.
Your rights
You can access, download and delete your documents from your dashboard, and delete your whole account in Settings. You can also ask us to access, correct, export, restrict or erase personal data, or object to processing, by emailing us. If you are in the EU, UK or another place with a data-protection authority, you can complain to it.
People who receive documents from our users
If someone sent you a document to sign or a form to fill, they decide how that data is used; we process it on their behalf. Contact the sender first; we'll help where we can.
Cookies and analytics
We use essential cookies for sign-in, security and remembering your choices, and Google Analytics cookies only as described here. We use no advertising cookies: Google's ad storage, ad user data and ad personalization signals are always set to “denied” (Google Consent Mode v2), and Google signals and ad personalization are switched off.
- EU, EEA, UK and Switzerland (and whenever we can't tell where you are): Google Analytics stays off, and nothing is sent to Google, until you choose Accept in the banner. Reject keeps it off. Your choice is remembered for 12 months.
- Everywhere else: Google Analytics is on by default, with no banner. You can turn it off below or with the Privacy choices link at the bottom of every page.
- Global Privacy Control and Do Not Track are treated as an opt-out wherever you are. Choosing to turn analytics on below overrides that signal for this site only.
- Your region is worked out from the country of your IP address by our host, Vercel, and stored for 24 hours in the
pb_regioncookie; we don't store the IP address for this. - Withdrawing consent stops collection at once and removes the Google Analytics cookies from this browser. You can also use Google's Google Analytics opt-out browser add-on.
| Cookie or storage | Type | Purpose | Kept for |
|---|---|---|---|
| Sign-in session (better-auth.*) | Essential | Keeps you signed in, including guest drafts | Up to 30 days |
| pb_region | Essential | Your consent region (EU/EEA/UK/CH or elsewhere), from your IP country; no IP address is stored in it | 24 hours |
| pb_consent (cookie and local storage) | Essential | Remembers your analytics choice | 12 months |
| pb_locale | Essential | Remembers the language you chose | 12 months |
| pb_aid (local storage) | First-party measurement | Random id for our own usage records (tools started and completed); never shared with Google or advertisers | Until you clear site data |
| _ga, _ga_* (Google Analytics) | Analytics, with consent | Distinguish visits and sessions for Google Analytics | 13 months |
| Firebase installation id (IndexedDB) and pb_signup | Analytics, with consent | The id Firebase Analytics attaches to hits; a 10-minute marker that an account was just created | Until revoked / 10 minutes |
Privacy choices
Essential cookies
Always onSign-in, security and bot protection, and remembering the choices on this panel. The site can't work without them.
Google Analytics counts visits and which pages and tools are used, so we can see what helps. It never receives your documents, file names, form values or email address.
Checking your current choice…
Advertising cookies
Never usedWe don't run ads or ad tracking, so there is nothing to turn on.
International transfers
Our providers may process data in the United States and other countries. Where required, transfers rely on standard contractual clauses or equivalent safeguards offered by those providers.
Children
PDFBetter is not directed at children under 16, and we don't knowingly collect their data.
Changes
We'll post changes here and update the date above. Material changes are emailed to account holders before they take effect.