1. Overview

PDF.chat is operated by Muddy Holdings LLC, a company based in the United States ("we", "us", "the Service"). The Service provides AI-powered tools to chat with your documents and PDFs, get cited answers and summaries, and process and convert your files. We collect only the information we need to run the Service, and we treat the files you upload as private and confidential. This policy describes the data we handle and the choices you have.

2. Information We Collect

We collect the following categories of information:

Account information, if you register, your email address and a securely hashed password. We never store your password in plain text.
Uploaded files, the documents and PDFs you submit, and the text and answers we generate from them. These are processed only to fulfill your request.
Usage data, pages processed, the tools and export formats you use, and your remaining page balance, so we can meter usage and run your account.
Technical data, IP address, browser type, and basic request logs used for rate limiting, security, and debugging.
Payment data, handled entirely by our payment processor; we never see or store your full card number.

3. Your Documents Are Processed Only to Serve You

The files you upload are used for one purpose: to provide the service you requested — answering your questions, summarizing, and processing your documents. Uploaded files and their results are deleted automatically from our servers shortly after processing. We do not sell or rent your documents. To answer your questions, the relevant parts of your document are sent to the AI model providers that power the chat (such as Anthropic, OpenAI, Google, and OpenRouter), which process them only to generate your answer and do not train on them. We never use your documents, your questions, or the answers we generate to train artificial intelligence models without your explicit consent. You retain full ownership of everything you upload and everything we produce for you.

4. How We Use Information

We use the information we collect to:

Provide, operate, and improve the chat, summary, and conversion features you use
Create and secure your account and authenticate API requests
Meter usage, apply page balances, and process payments
Prevent abuse, enforce rate limits, and keep the Service secure
Send essential account, billing, and support communications

5. Cookies and Analytics

We use a small number of cookies that are necessary to sign you in, keep your session, and remember your language preference. For privacy-respecting traffic analytics we use Clicky, which helps us understand aggregate usage without building advertising profiles of individual visitors. You can disable cookies in your browser settings, though some features may stop working.

6. Service Providers

We rely on a limited set of trusted providers to operate the Service. Payments are processed by Stripe and PayPal, which handle your payment details directly under their own security and privacy standards; we receive only the information needed to confirm a transaction. The chat is powered by AI model providers (Anthropic, OpenAI, Google, and OpenRouter), which receive only the portions of your document needed to answer your questions and process them solely for that purpose. We share data with service providers only as necessary to run the Service, and never for their own marketing.

7. Data Retention

Uploaded files and their results are deleted automatically from our servers shortly after processing. Account information is retained while your account is active and for a reasonable period afterward to meet legal, accounting, and security obligations. You can request deletion of your account and associated personal data at any time.

8. Data Security

We use industry-standard technical and organizational measures to protect your information, including encryption in transit (HTTPS), hashed passwords, access controls, and automatic deletion of processed files. No method of transmission or storage is completely secure, but we work continuously to safeguard your data.

9. Your Rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Request deletion of your account and personal data
Export a copy of your data in a portable format
Object to or restrict certain processing

If you are in the EEA or the UK, Muddy Holdings LLC is the data controller and we process your data under the GDPR on the legal bases of performing our contract with you and our legitimate interest in operating the Service. California residents have rights under the CCPA. We do not sell your personal information. Because we operate from the United States, using the Service means your information may be transferred to and processed in the US; to exercise any of these rights, contact us.

10. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the date below. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this policy or how we handle your data, reach out through our contact page or email hello@pdf.chat. The data controller is Muddy Holdings LLC, United States.