1. Who controls your data
iGenPDF is the trade name of the web service that lets users create, review, paginate, and download PDF documents with artificial intelligence assistance.
- Data controller
- igenpdf
- Privacy contact
- legal@igenpdf.com
- Data protection officer
- Not appointed unless this later becomes a legal requirement.
This policy applies to the public website, the iGenPDF application, and communications relating to the service.
2. Data we process
| Category | Examples | Source |
|---|---|---|
| Account and identity | User and session IDs, name, email address, profile image, and sign-in details made available through Clerk. | The user and authentication provider. |
| Content | Prompts, follow-up instructions, PDF, DOC or DOCX files, extracted text, generated documents, and final PDFs. | The user and the generation they request. |
| Use and account status | Session status, generation events, token usage, available credits, and requested downloads. | Use of the service. |
| Technical and security | IP address, request origin, dates and times, technical IDs, browser, operating system, and error logs. | The device and our systems and providers. |
| Preferences | Selected language and strictly necessary preferences. | The browser and the user. |
We do not request special categories of data—such as health, biometrics, political opinions, or beliefs—or children's data. Do not include them in prompts or documents unless this is essential, you have a sufficient legal basis, and you have applied suitable safeguards.
3. Why we use data and our legal bases
| Purpose | Legal basis |
|---|---|
| Create and manage your account, authenticate you, apply credits, and provide access to the application. | Performance of a contract or steps you request before entering into one. |
| Process instructions and files, generate document versions, show previews, and deliver the PDF. | Performance of a contract. |
| Handle questions, incidents, requests, and operational service communications. | Performance of a contract and our legitimate interest in providing support. |
| Protect accounts and systems, prevent fraud and abuse, diagnose faults, and maintain availability. | Our legitimate interest in operating a secure service and, where relevant, compliance with legal obligations. |
| Meet tax, accounting, and regulatory obligations and respond to valid requests from public authorities. | Compliance with a legal obligation. |
If we send marketing communications in the future, we will rely on the legal basis required by law and provide an easy way to object or withdraw consent. iGenPDF does not currently use the data described above for behavioural advertising.
Required account data and the content you choose to process are necessary to provide the service. Without them, we cannot authenticate you or generate the requested document.
4. How artificial intelligence is involved
Prompts, instructions, and files you provide are sent to OpenAI through its API to produce document content and design. iGenPDF also stores the responses and artefacts required to display, revise, paginate, and download the result.
Under OpenAI's published default configuration, data sent to its API is not used to train its models unless the customer expressly opts in, and certain abuse-prevention logs may be retained for up to 30 days. See OpenAI's API data controls.
Document generation does not involve a solely automated decision about you that produces legal or similarly significant effects. Automatic credit-balance checks are a functional access control.
5. Providers, recipients, and international transfers
We share data only where necessary to provide or protect the service or comply with the law:
- Clerk: authentication, account and session management, and credit metadata. Clerk may act as our processor and, for certain account information it handles for its own purposes, as an independent controller. See its privacy policy.
- OpenAI: processing prompts, files, and results to generate the requested document as a technology provider.
- Technical infrastructure: hosting, security, communications, and support providers needed to operate iGenPDF and bound by confidentiality obligations.
- Authorities and third parties: where required by law, a valid request, or the establishment or defence of legal claims.
Clerk and some OpenAI providers may process data from the United States or other countries outside the European Economic Area. Where an international transfer occurs, we use GDPR-recognised mechanisms such as adequacy decisions—including the EU–US Data Privacy Framework where applicable—Standard Contractual Clauses, and supplementary measures. You may ask the privacy contact for information about the applicable safeguards.
6. How long we keep data
iGenPDF does not currently provide or maintain a persistent project or document history within the account. The following criteria apply while the service operates:
- Account data is kept while the account remains active and, after closure, for the periods needed to meet legal obligations or address potential liability.
- Prompts, files, outputs, and technical records are processed during the session. The backend creates working files and technical logs needed to generate and deliver the PDF, troubleshoot incidents, and protect the system. These files do not form an account-accessible history and may remain in the infrastructure until operational deletion or until you request erasure.
- Attachments are kept temporarily within iGenPDF infrastructure during their operational lifecycle. We attempt to delete the temporary copy sent to OpenAI at the end of generation and configure it to expire after approximately one hour as a technical fallback.
- Security logs are retained for as long as required to investigate incidents, prevent abuse, and establish or defend legal claims.
You may request erasure of data associated with your account by contacting legal@igenpdf.com, without affecting information that must be retained to comply with the law or address potential liability.
7. Cookies and local storage
iGenPDF uses cookies or similar technologies that are strictly necessary to start and maintain a session, protect the account, and remember the selected language. The language preference is stored locally in your browser. These technologies support requested functionality and are not used for advertising.
We do not currently use first-party analytics or advertising cookies. If we add non-essential technologies, we will update this information and request prior consent where required. You can remove browser data through its settings; doing so may sign you out or reset preferences.
8. Your rights
You may request access, rectification, erasure, restriction, objection, and data portability where applicable. You may also withdraw consent without affecting processing lawfully carried out before withdrawal.
Send your request to the privacy email listed in the controller section and identify the right you wish to exercise. We may request reasonable information to verify your identity and will respond within the legally applicable period.
If you believe our processing infringes data-protection law, you can lodge a complaint with the Spanish Data Protection Agency or the supervisory authority for your place of residence or work.
9. Security, third-party data, and children
Security
We apply technical and organisational measures intended to protect data against loss, alteration, unauthorised access, or disclosure. No system is completely infallible. Use a strong password, protect your session, and avoid uploading information that is not needed.
Other people's data
If you include another person's data in a prompt or file, you confirm that you are authorised to process and disclose it for that purpose. You must inform those people where required and limit the content to what is strictly necessary.
Children
The service is not directed to anyone under 18. If we learn that a child provided data without valid authorisation, we will take reasonable steps to delete it.
10. Changes and contact
We may update this policy to reflect changes in the service, providers, or law. We will publish the new version and its revision date and, if a change is material, provide notice through an appropriate channel.
For questions about this policy or our use of your data, contact legal@igenpdf.com.
You should also read the Terms and conditions governing use of iGenPDF.