Privacy Policy

What we collect

We collect the files you upload to run a tool, your account email when you sign up, billing details routed through LemonSqueezy, and basic telemetry (a hashed IP for rate limiting, job timestamps, feature usage counters).

We do not sell your data. We do not run third-party ad trackers.

How long we keep files

Uploaded inputs and tool outputs are deleted from object storage on a fixed schedule after each job finishes:

• Free tier: 60 minutes
• Pro tier: 15 minutes

Abandoned uploads (presigned PUT succeeded but no job was created) are deleted within one hour.

Job metadata (tool name, status, timestamps — never file contents) is retained against your account for billing history and is included in your GDPR data export.

Your rights

You can export every row we hold about you at any time from the dashboard, or by GETting /api/account/export. The download is a ZIP of account, jobs, invoices, and subscriptions.

You can request deletion at any time from the dashboard, or by POSTing {"confirm": "ERASE"} to /api/account/erase. We anonymize your account, sever its link to past jobs, and delete their object-storage artefacts. Invoice and subscription rows are retained because tax law requires it; they no longer identify you.

Subprocessors

• Cloudflare R2 — file storage
• LemonSqueezy — billing and tax
• AI providers we route to: DeepSeek, OpenRouter, Anthropic, OpenAI

Contact

Questions go to security@pditor.com — the same inbox handles vulnerability reports and GDPR requests.