Privacy Policy

A2Z PDF

Effective date: 12 July 2026 Data Fiduciary: A2Z PDF Website: https://a2zpdf.in Contact: support@a2zpdf.in

Template notice: This is a plain-language template aligned with India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. It is not legal advice. Please have it reviewed by a qualified advocate in India before you publish or rely on it.

---

1. Introduction

This Privacy Policy explains how A2Z PDF ("we", the "Data Fiduciary") collects, uses, stores, and protects your personal data when you use A2Z PDF (the "Service"). It is designed to comply with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"). Under these laws, you are the "Data Principal" whose personal data we process.

2. The most important point: your files stay on your device

A2Z PDF processes your PDF and document files entirely on your own device. Your files are not uploaded to us or to any server. Any temporary files created while a tool runs are stored only on your device and are removed after processing. We do not see, collect, copy, or retain the contents of your documents.

3. What personal data we collect

We collect the minimum data necessary to operate email verification for certain sensitive tools:

Data	Why we collect it	Legal basis
Email address	To send you a one-time verification code and record your acceptance of our policies	Your consent
Verification logs / timestamps	Date and time a code was requested and verified; which policy versions you accepted	Consent + our legitimate need to keep proof of acceptance
IP address (if available)	Security, rate-limiting, and fraud prevention during verification	Consent + security
Basic usage data	Aggregate, non-identifying information such as which tools are used and error events, to improve the Service	Consent

We do not collect your documents, their contents, or special-category data, and we do not knowingly collect data of children.

4. How we use your data

We use your personal data only to:

• Send and validate one-time verification codes;
• Record and prove your acceptance of the Terms of Service, Privacy Policy, and Acceptable Use Policy;
• Prevent abuse (rate-limiting, security);
• Maintain, support, and improve the Service; and
• Comply with legal obligations.

We do not sell your personal data, and we do not use it for advertising.

5. Consent and notice

Before we collect your email for verification, we ask for your explicit consent and present links to this Policy, the Terms of Service, and the Acceptable Use Policy. By ticking the acceptance box and submitting your email, you consent to the processing described here. You may withdraw consent at any time (see Section 8); withdrawal does not affect processing already carried out, and may mean you can no longer use the verification-gated tools.

6. Data sharing and processors

We share personal data only with:

• Our email delivery provider (a "Data Processor"), used solely to send verification codes. This provider processes your email address on our instructions under a contract.
• Authorities, where disclosure is required by law or a valid legal order.

We do not otherwise disclose your personal data to third parties.

7. Data retention

• Email verification codes (OTPs): stored only as a hashed value and deleted or invalidated within 10 minutes (on expiry or use).
• Verification / acceptance records (email, timestamps, accepted policy versions, IP): retained for [e.g., 3 years] to evidence acceptance and for legal protection, or longer if required by law, then deleted or anonymised.
• Basic usage data: retained in aggregate form only.

8. Your rights as a Data Principal

Under the DPDP Act you have the right to:

• Access — obtain a summary of the personal data we process about you;
• Correction and updating — have inaccurate or incomplete data corrected;
• Erasure — request deletion of your personal data where it is no longer necessary and no law requires us to keep it;
• Grievance redressal — raise a complaint with us (Section 10);
• Nominate — nominate another individual to exercise your rights in the event of death or incapacity; and
• Withdraw consent — as easily as you gave it.

To exercise any right, contact us at support@a2zpdf.in. We will respond within the timelines required by law.

9. Security

We use reasonable technical and organisational safeguards, including storing verification codes only as hashes, transmitting data over encrypted connections, restricting access, and rate-limiting requests. No system is perfectly secure, but we take steps to protect your data and will notify you and the Data Protection Board of India of a personal data breach as required by the DPDP Rules.

10. Grievance Officer / contact for privacy

If you have any question, request, or complaint about your personal data, contact our Grievance Officer:

• Name: Grievance Officer
• Email: support@a2zpdf.in
• Address: Available on request via email

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India as provided under the DPDP Act.

11. Children

The Service is intended for adults. We do not knowingly process the personal data of anyone under 18. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Effective date" and, where the change affects verified tools, by asking you to re-accept. Please review this Policy periodically.

13. Contact

A2Z PDF — support@a2zpdf.in — https://a2zpdf.in.