Privacy policy

The short version

Most of our tools never send your file anywhere. They run inside your browser tab, on your own machine, and the file does not leave your computer — not to us, not to anyone. There is no upload to opt out of, because there is no upload.

A small number of tools genuinely cannot work that way, and those are named below. For them we take the file, do the one job you asked for, and delete it. We do not read your files, sell anything, or train anything on them.

Tools that never upload anything

Merging, splitting, rotating and compressing PDFs, image conversion and resizing, the text tools, QR codes, the printable templates, and short video trims and joins all run in your browser using WebAssembly. Your file is opened by code running in your tab. No copy is transmitted to our servers, so there is nothing for us to keep, lose or hand over.

You do not have to take our word for it. Open your browser's network inspector while you use one: you will see the page and its code load, and no request carrying your file.

Tools that do upload

Four tools need software that cannot run in a browser tab: PDF to Word, Bank Statement to Excel, Compress PDF to a Size, and the three video tools when a file is too large for your browser to handle. The video tools try your machine first and only reach for our servers when that fails; they tell you on screen when they are about to. For these your file is uploaded over an encrypted connection to Google Cloud Storage and processed on our servers. Specifically:

• The file you uploaded is deleted as soon as the job succeeds. It is not kept for a cache, a backup, or a sample.
• Everything in that storage bucket — inputs and results alike — is deleted automatically within 24 hours, whatever else happens.
• Your download link is signed and stops working after one hour. Nobody can browse the bucket, and the link is not guessable.
• No human at Redcoast Corporation opens your file. It is passed to the conversion program and the result is passed back to you.
• Your files are never used to train machine learning models, ours or anyone else's.

What we store about you

You can use the free tools with no account and we will hold nothing that identifies you. If you do more than that, here is the complete list.

Your account

Your email address, and whether the account was made with a password or with Google sign-in. Sign-in is handled by Firebase Authentication. If you use a password, we never receive or store it. If you use Google, Google tells us your email address and basic profile — not your contacts, files or anything else.

Billing

Payments are processed by Paddle, who act as the seller of record. Your card number never touches our servers and we could not retrieve it if we wanted to. What we store is your plan, your credit balance, your renewal date, and the identifiers Paddle gives us so we can match a payment to an account.

Documents you choose to save

If you use the resume builder and press save, that document is stored in your account so you can come back to it. It is readable only by you, and deleting it in the app deletes it for good.

Waitlist signups

If you ask to be told when a tool ships, we keep your email address, which tool you asked about, and the date. We use it to send that one message. Ask us and we will delete it.

Analytics and logs

We use Google Analytics to count which pages get visited and roughly where visitors are, which is how we decide what to build next. We ask before it stores anything: until you agree, no analytics cookie is set, and if you decline we still get an anonymous count with nothing stored on your device. It is not connected to your account and we do not use it to build a profile of you. Our servers also keep ordinary request logs, including IP addresses, for security and debugging, which is what lets us block someone hammering the upload endpoint.

Data kept on your device

Some usage counters and preferences are stored in your browser's local storage. That data stays on your device and is not sent to us. Clearing your browser data removes it.

What we never do

We do not sell or rent your personal data. We do not sell your files. We do not run advertising networks or third-party ad trackers on this site. We do not train models on anything you upload. There is no business here that depends on any of that, which is the only reason to believe a sentence like this one.

Who else touches the data

Running a service means using other companies, and honesty requires naming them. Google Cloud and Firebase host the site, the sign-in system, the database and the file processing. Paddle handles payments. Google Analytics provides the visitor statistics described above. Each of them only receives what they need for their part, and we do not give anyone data for their own marketing.

These providers operate internationally, so your data may be processed outside your own country, under the safeguards those providers maintain for such transfers.

Why we are allowed to hold it

Where data protection law requires a legal basis: we process your account and billing data because we need it to provide the service you asked for; we process logs and security data on the legitimate interest of keeping the service working and unabused; and we rely on your consent, where required, for analytics.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Email [email protected] and we will act on it within 30 days. You do not need to explain why, and asking will never cost you anything or degrade your service.

You do not have to ask us for either. Your account page has a button that downloads everything we hold about you as a file, and a button that deletes the account outright — sign-in, saved documents, billing record, and any active subscription, cancelled on the spot. It is immediate and cannot be undone. The only thing that survives is the payment records tax law requires us to keep.

If you are in the UK, EU or a jurisdiction with a similar regime, you also have the right to complain to your data protection authority.

Children

PhotoSoft is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal information, tell us and we will remove it.

Changes

If we change this policy we will update the date at the top. If a change materially affects how we handle your data, we will tell account holders by email rather than quietly editing the page.

Contact

Privacy questions and requests: [email protected]. For anything else, see contact.