Privacy Policy

Introduction

FLUTTWINGS INVESTMENTS LIMITED (“we,” “us,” or “our”), with registered address at Dimostheni Severi 12, 6th floor, Flat/Office 601, 1080, Nicosia, Cyprus, is the data controller of your personal information and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service at pdfvault.ai.

Information We Collect

Information you provide directly

• Account registration details (name, email address, password hash).
• Payment information (processed and stored by our payment processors; we do not store full card details).
• Communications you send us (support tickets, emails).

Information collected automatically

• Log data: IP address, browser type, pages visited, timestamps, referring URLs.
• Device information: operating system, screen resolution, language settings.
• Usage data: features used, file types processed (not file contents), session duration.
• Cookies and similar tracking technologies (see our Cookie Policy).

Your uploaded files

Files you upload are processed to deliver the feature you request and are not retained beyond the processing session unless you explicitly save them to your account. If you save files to your account, we store them until you delete them or close your account.

How We Use Your Information

• Provide, maintain, and improve the Service.
• Process payments and manage subscriptions.
• Send transactional emails (receipts, renewal reminders, service updates).
• Respond to support requests.
• Analyze usage patterns to improve user experience (using anonymized / aggregated data).
• Send marketing communications where you have consented (you may unsubscribe at any time).
• Comply with legal obligations and detect and prevent fraud or abuse.

Legal Bases for Processing (EEA and UK Users)

For users in the European Economic Area and the United Kingdom, we process personal data under the EU GDPR and UK GDPR on the following bases: performance of a contract (to provide the Service); legitimate interests (security, fraud prevention, service improvement); legal obligation (compliance with applicable laws); and consent (marketing communications and non-essential cookies, which you may withdraw at any time).

Data Sharing and Disclosure

We do not sell your personal data for monetary compensation. We may share data with:

• Service providers: payment processors [Adyen], hosting and email providers [GoDaddy], customer support tools [Zendesk], and file conversion providers [CloudConvert], contractually bound to protect your data.
• Analytics providers (e.g., Google Analytics), using pseudonymized data.
• Law enforcement or regulatory authorities when required by law.
• Successors in the event of a merger, acquisition, or sale of assets (with notice to you).

Note: some sharing via cookies for analytics or advertising may qualify as a “sale” or “sharing” under certain US state laws even without payment; see Section 10.

Data Retention

• Account data: retained while your account is active.
• Uploaded files: not retained beyond the processing session unless saved to your account.
• Payment records: retained as required by financial and tax regulations.
• Log data: retained for up to 90 days.

You may request deletion of your account and associated data at any time (see Section 8).

International Data Transfers

Your data may be processed in countries outside your own, including outside the EEA and the UK. Where we transfer data internationally, we implement appropriate safeguards, including the European Commission’s Standard Contractual Clauses for EEA transfers and the UK International Data Transfer Addendum for UK transfers.

Your Rights

Depending on your location, you may have the right to: access a copy of your personal data; rectify inaccurate data; request erasure (“right to be forgotten”); restrict processing; receive your data in a portable, machine-readable format; object to processing based on legitimate interests; withdraw consent at any time; and lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at dpo@pdfvault.ai. We will respond within the timeframe required by applicable law (one month under the GDPR / UK GDPR; up to 45 days under certain US state laws). We may need to verify your identity before acting on a request.

Children’s Privacy

The Service is not directed to children under 18, and users must be at least 18 to use the Service (see our Terms and Conditions). We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, contact us immediately at dpo@pdfvault.ai and we will delete it.

US State Privacy Notice

This section applies to residents of US states with consumer privacy laws (including California, Colorado, Connecticut, Texas, Virginia, and others). In the preceding 12 months we have collected the categories of personal information described in Section 2: identifiers, commercial information, and internet activity information. We collect them for the purposes in Section 3 and share them with the categories of recipients in Section 5.

You may have the right to: know and access the personal information we hold about you; delete it; correct it; receive it in a portable format; opt out of “sales,” “sharing,” and targeted advertising; limit use of sensitive personal information; and not be discriminated against for exercising these rights. We honor Global Privacy Control (GPC) signals as an opt-out of sale / sharing where required. To exercise any right, or to appeal a decision, email dpo@pdfvault.ai. Authorized agents may submit requests with proof of authorization.

Security

We implement industry-standard security measures including TLS encryption in transit, encryption at rest, hashed passwords, access controls, and regular security reviews. No system is completely secure; we cannot guarantee absolute security. If a personal data breach occurs, we will notify affected users and regulators where required by law.

Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be announced by email or prominent notice on the Service before they take effect. The “updated date” above shows when this Policy was last revised.

Contact

FLUTTWINGS INVESTMENTS LIMITED
Dimostheni Severi 12, 6th floor, Flat/Office 601, 1080, Nicosia, Cyprus.
Privacy contact: dpo@pdfvault.ai