Privacy Policy

FileFlexify (“we”, “us”) provides online tools at fileflexify.com to edit, convert, compress, merge, split, fill, protect and redact files. This policy explains what information we handle when you use the website, how we use it and the choices you have.

These tools work entirely on your device. Your file is never sent to our servers, so we never see it:

• Edit PDF (edit text, add text, sign, highlight, whiteout, remove watermarks, rotate and delete pages)
• Split PDF and Extract pages
• Create fillable PDF and Fill PDF form

Conversions, compression, merging, OCR, Protect, Unlock and Redact PDF run on our servers. For these tools:

• Files travel over an encrypted HTTPS connection and are processed automatically. No person opens or reads them.
• Your uploaded files are deleted as soon as processing finishes. The result is kept only so you can download it, and is permanently deleted after 60 minutes.
• Passwords you enter to protect or unlock a PDF are used only for that job and erased from our systems as soon as it ends.
• We never use your files to train AI models, for advertising or for any purpose other than the task you requested.

An account is optional. If you create one, we store:

• Your name and email address, and a securely hashed password — or your Google account ID if you sign in with Google.
• Your two-factor authentication settings, if you turn it on.
• A history of your recent jobs: tool, file names, sizes and dates — never the file contents.
• Active sign-in sessions (browser and IP address) so you can review them and sign out other devices.
• Security events such as sign-ins and password changes, to protect your account.

To run and improve the service we record basic job details (tool used, file types and sizes, processing time and errors). IP addresses used for rate limiting and abuse prevention are stored only as salted one-way hashes, which can't be turned back into the address.

• Strictly necessary cookies keep you signed in and keep your session secure.
• Your browser's local storage remembers preferences such as dark mode and the sidebar state.
• With your permission, we use Google Analytics to understand how the website is used, such as which pages and tools are popular. It sets its own cookies, and Google receives your IP address and basic device information. Your files and their contents are never sent to it.
• In the EU, the UK and Switzerland, analytics cookies stay off until you accept them. You can change your choice at any time with “Cookie settings” at the bottom of every page.
• We don't use advertising cookies.

We only send service emails, such as verifying your address and resetting your password. If you contact us through the contact form or by email, we keep your message so we can reply and help you.

We don't sell, rent or trade personal information. We share data only with the providers needed to run the service, under appropriate agreements:

• Our hosting provider, which runs our servers and database.
• Our network and security provider, which delivers the website quickly and blocks attacks.
• Our email provider, which sends service emails.
• Google Analytics, which measures how the website is used, if you allow analytics cookies.
• Google, only if you choose to sign in with Google.

We may also disclose information when the law requires it.

• HTTPS encryption everywhere, with strict transport security.
• Passwords hashed with a modern algorithm and checked against known data breaches.
• Optional two-factor authentication for every account; required for our administrators.
• Uploaded files are checked so only genuine documents and images reach our processing engines.
• Access to production systems is restricted and logged.

• Uploaded files: until processing finishes. Results: 60 minutes.
• Account data and job history: until you delete your account.
• Contact messages: as long as needed to handle your request.
• Technical logs: a limited period for security and troubleshooting.

You can view your job history, manage sessions and permanently delete your account and its data at any time from Account & security. You can also ask us to access, correct, export or delete your data by emailing us.

Depending on where you live — for example under India's Digital Personal Data Protection Act, the EU/UK GDPR or US state laws such as the CCPA — you may have additional rights, including the right to complain to a data protection authority.

FileFlexify is not directed at children under 13, and we don't knowingly collect their personal information. If you believe a child has created an account, contact us and we'll delete it.

We may update this policy as our tools change. We'll update the date at the top of this page, and announce significant changes on the website.

For any privacy question or request, email [email protected].