PDFTwin

Privacy Policy

Last updated: July 27, 2026

Overview

PDFTwin is a browser-based document workspace at pdftwin.com, operated by Helios Impex, a company based in India (“Helios Impex,” “we,” “us,” or “our”). This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies when you use our website, tools, and account features.

PDFTwin is designed so routine document work does not require permanent storage of your files on our servers. Many tools run entirely in your browser; others use short-lived server processing. See How it works for a tool-by-tool breakdown.

How processing works by tool type

Client-side tools (files stay on your device)

These tools process files locally in your browser using JavaScript libraries (pdf-lib, PDF.js, Tesseract.js, and others). File contents are not uploaded to PDFTwin servers:

  • Merge & arrange, split PDF, extract pages, rotate pages, remove pages
  • Compare PDFs (rendered with PDF.js)
  • Sign PDF, images to PDF, PDF to JPG/PNG, PDF to text
  • OCR text extract (Tesseract.js runs in your browser)

On these tools, you can verify privacy by opening your browser’s developer tools (Network tab) while processing — you should see no file upload to our origin.

Server-side tools (temporary upload, then discarded)

These tools send files to our backend over HTTPS for in-memory processing. Files are not written to permanent storage and are discarded when the request completes:

  • PDF to Word, PDF to Excel, Word to PDF
  • Compress PDF, watermark PDF, lock & unlock
  • Extract embedded images *(document conversion tool)*
  • Image conversion and image resize

We do not use uploaded documents to train AI models, build marketing lists, or sell data to third parties.

Information we collect

Account information

If you create an account, we collect your email address and authentication credentials through Supabase Auth. We store a profile record linked to your account with your email and plan status (Free or Pro). If you subscribe to Pro, we may store a PayPal subscription identifier to manage your plan.

You can sign in, sign out, and update your plan from the Account page. Deleting your account removes your profile from our database; authentication data is managed by Supabase according to their retention policies.

Usage and plan enforcement data

To enforce Free-plan limits on PDF → Word and Excel exports, our server sets an HttpOnly cookie (pdftwin_doc_convert) that records how many document conversions you have used today. This cookie expires within 24 hours and does not contain file contents. Pro users bypass this limit.

When you use server-side tools while signed in, we may read your plan status from request headers or your profile to apply file-size limits (50 MB Free, 200 MB Pro).

Payment information

Pro checkout is handled by PayPal. Helios Impex receives confirmation of your subscription status but does not receive or store your credit card number, bank account details, or PayPal password.

Analytics and hosting data

On production deployments hosted on Vercel, we use Vercel Analytics to understand page views and improve reliability. Analytics data is aggregated and does not include the contents of files you upload or process. Vercel and our hosting infrastructure may also log standard request metadata (IP address, browser type, timestamps) for security and operations.

Information we do not collect

  • Permanent copies of documents you upload for server-side processing
  • Contents of files processed in client-side tools
  • Marketing profiles built from your document content

Browser storage on your device

Workspace file tray (IndexedDB)

The workspace file tray stores files in your browser using IndexedDB so you can switch between tools without re-uploading. This data stays on your device until you clear the tray, clear site data, or uninstall your browser profile. PDFTwin does not sync this tray to the cloud today.

Local preferences and mirrors

We may store small amounts of data in your browser’s localStorage — for example, a mirror of your daily document-export count for display in the UI, or preview-mode account data when mock authentication is enabled in development. This data is not sent to our servers except where needed to enforce plan limits on server-side tools.

Thumbnails and caches

File thumbnails in the workspace use in-memory object URLs and a PDF.js page cache during your session. They are not persisted separately from the file tray.

Cookies

PDFTwin uses a small number of cookies:

  • pdftwin_locale — Remembers your language preference (English, Spanish, French, or Dutch). Duration: up to one year.
  • pdftwin_doc_convert — Tracks daily PDF → Word/Excel export count for Free-plan enforcement. HttpOnly, not accessible to page scripts. Duration: up to 24 hours.
  • Supabase session cookies — When you sign in, Supabase Auth sets session cookies to keep you logged in. See Supabase’s privacy policy for details.
  • Vercel Analytics — May use cookies or similar technologies for aggregated traffic measurement on production deployments.

You can block or delete cookies in your browser settings. Blocking essential cookies may prevent sign-in, locale persistence, or accurate enforcement of Free-plan export limits.

Third-party downloads (OCR)

When you first use the OCR tool, Tesseract.js downloads language model files from third-party content delivery networks into your browser. These downloads are initiated by your device for local processing — your document is not sent to those CDNs as part of OCR.

How we use information

We use the information described above to:

  • Provide, operate, and improve PDFTwin’s tools and workspace
  • Authenticate accounts and manage Free and Pro plan access
  • Enforce plan limits and prevent abuse
  • Process Pro subscriptions through PayPal
  • Measure site traffic and diagnose reliability issues
  • Respond to support requests and legal obligations

How we share information

We do not sell your personal information. We share data only with service providers that help us run PDFTwin, and only as needed:

  • Supabase — Authentication and profile storage (email, plan status)
  • PayPal — Subscription billing and payment processing
  • Vercel — Hosting, serverless API execution, and analytics

We may also disclose information if required by law, to protect our rights or users, or in connection with a merger or acquisition.

Data retention

  • Uploaded files (server tools) — Held in memory only for the duration of processing, then discarded immediately
  • Workspace file tray — Retained on your device until you clear it
  • Account profile — Retained while your account is active; deleted when you delete your account
  • Usage cookies — Expire automatically (typically within 24 hours to one year depending on the cookie)
  • Analytics — Retained by Vercel according to their policies, in aggregated form

Security

Server-side file transfers use HTTPS encryption. Authentication is handled by Supabase. We take reasonable measures to protect the information we process, but we do not guarantee that the service or your data will be secure or free from unauthorized access. Use client-side tools for highly sensitive documents when you want processing to remain entirely on your device.

International users

PDFTwin is available globally. Helios Impex is based in India. Your information may also be processed in the United States or other countries where our hosting and service providers operate (including Supabase, PayPal, and Vercel). By using PDFTwin, you consent to this transfer and processing.

PDFTwin supports multilingual filenames and document text. Interface translations are available in English, Spanish, French, and Dutch; legal pages are currently provided in English.

Children

PDFTwin is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us account information, contact us so we can delete it.

Your choices

  • Use without an account — Most tools work without signing in
  • Clear local data — Remove workspace files and site data from your browser settings
  • Manage cookies — Block or delete cookies in your browser
  • Delete your account — Remove your profile and sign-in credentials
  • Cancel Pro — Cancel recurring billing through PayPal at any time

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest revision. Continued use of PDFTwin after changes are posted constitutes acceptance of the updated policy.

Contact

Questions about this Privacy Policy or your data may be directed to Helios Impex through the contact options listed on pdftwin.com. A dedicated support email will be published on the site when available.

Related documents: Terms of Use · How it works · FAQ