Privacy Policy

1. Introduction

Welcome to ProPDFWorks (“we,” “us,” “our,” or “Company”). We operate the website https://propdfworks.com (the “Site”), which provides free online PDF tools, image conversion services, e-commerce label cropping solutions, and Digital Signature Certificate (DSC) services.

At ProPDFWorks, protecting your privacy is our top priority. This Privacy Policy explains in detail how we collect, use, disclose, store, and safeguard your information when you visit our Site and use our services. We are committed to transparency about our data practices and compliance with applicable privacy laws and regulations.

Please read this Privacy Policy carefully. By accessing or using ProPDFWorks, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our Site.

2. Scope and Application

This Privacy Policy applies to:

• ProPDFWorks website (https://propdfworks.com)
• All tools and services provided through our website
• All user interactions with our platform
• Any personal information collected from you

Exception: This Privacy Policy does not apply to third-party websites, applications, or services that may be linked from our Site. We encourage you to review the privacy policies of any third-party services before providing your information.

3. Information We Collect

3.1 Information You Provide Directly

Contact and Account Information

We collect personal information when you voluntarily provide it, including:

• Full name
• Email address
• Phone number
• Mailing address
• Business or organization name
• Job title or designation
• Any other information you choose to provide in forms

Situations where we collect this information:

• Contact form submissions
• Consultation request forms
• Inquiry about Digital Signature Certificate services
• Customer support inquiries
• Newsletter subscriptions
• Email communications with our team
• Any other direct communication with us

Payment Information

For Digital Signature Certificate services, we may collect payment-related information:

• Payment method details (credit card, debit card, net banking, UPI, etc.)
• Billing address
• Transaction history
• Invoice information

Important: We do not directly store or process payment card details on our servers. Payment information is transmitted securely to certified third-party payment processors who handle all payment processing and PCI DSS compliance.

DSC Service Information

When you apply for Digital Signature Certificate services, we collect additional information:

• Government ID information (Aadhar, PAN, Passport, etc.)
• Verification documents
• Photograph
• Signature samples
• Business registration details (for organizations)
• Director/authorized signatory information
• Any other information required for DSC issuance under Indian digital signature regulations

3.2 Information Automatically Collected

Device and Browser Information

When you visit our Site, we automatically collect technical information about your device and browsing activity:

• IP address (Internet Protocol address)
• Device type and model
• Operating system and version
• Browser type and version
• Browser language preference
• Device identifiers

Usage and Activity Information

• Pages you visit on our Site
• Time and date of your visits
• Duration of time spent on specific pages
• Links you click on
• Actions you perform (uploading files, using tools, etc.)
• Search queries you enter
• Referral source (where you came from)
• Exit pages (where you go when leaving)
• Geographic location (country/city level, not precise location)

File Metadata (For Tool Processing)

When you use our tools:

• File names
• File sizes
• File types (format)
• Approximate file dimensions/pages
• Processing timestamps
• Processing status and results

Important File Processing Disclosure:

• Files are processed entirely on your local device using JavaScript code running in your web browser
• Files are NOT transmitted to our servers for processing
• Files are NOT stored permanently on our servers
• We do NOT have access to the content inside your files
• We cannot view, read, or access the actual file data
• Processing occurs 100% client-side within your browser

3.3 Cookies and Similar Tracking Technologies

What are Cookies?

Cookies are small text files stored on your device that enable us to remember information about your visit and preferences. We use cookies and similar technologies to enhance your experience on our Site.

Types of Cookies We Use:

Essential/Functional Cookies

• Required for basic Site functionality
• Enable page navigation and tool access
• Maintain Site security
• Remember your session information
• Examples: Session cookies, security tokens
• Cannot be disabled without losing Site functionality

Analytics Cookies

• Collect information about how you use our Site
• Help us understand user behavior and trends
• Identify popular pages and features
• Track site performance and errors
• Enable us to improve our services
• Google Analytics cookies
• These cookies don’t identify you personally

Advertising Cookies

• Serve relevant advertisements through Google AdSense and other ad networks
• Track ad impressions and clicks
• Help advertisers understand ad performance
• Enable retargeting across websites
• Google AdSense cookies
• Third-party advertising network cookies

Social Media Cookies (if applicable)

• Enable social media sharing functionality
• Track social media engagement
• Allow social media platforms to track your activity

Cookie Duration:

• Session cookies: Deleted when you close your browser
• Persistent cookies: Remain on your device for specified periods (typically 1-24 months)

Cookie Management:

You have control over cookies through your browser settings:

Important Notice: Disabling essential cookies may prevent our Site from functioning properly. Disabling analytics cookies will not affect Site functionality but may limit our ability to improve services.

3.4 Web Beacons and Pixels

We use web beacons (also called pixels or tracking pixels) – small graphic images – to:

• Track page visits and user engagement
• Monitor advertising effectiveness
• Understand user behavior patterns
• Improve Site performance
• Collect analytics data

These are typically transparent and invisible to users.

3.5 Information from Third Parties

We may receive information about you from:

• Payment processors (transaction details)
• Certifying authorities (for DSC services)
• Third-party analytics services
• Social media platforms (if you connect your account)
• Referral sources
• Customer reviews or feedback

3.6 Information You Do NOT Provide

What We Do NOT Collect:

• Sensitive personal data (without explicit consent)
• Biometric information (except when voluntarily provided for DSC services)
• Payment card details (these are handled by third-party processors)
• Precise location data (unless you explicitly enable location services)
• Call or SMS content (we only see communication metadata)
• Files you process (they remain on your device only)

4. How We Use Your Information

4.1 To Provide Our Services

We use your information to:

• Deliver PDF tools, image conversion tools, and label cropping services
• Process your Digital Signature Certificate applications
• Issue and manage your DSC and tokens
• Provide customer support and assistance
• Handle your inquiries and requests
• Process payments for paid services
• Send service updates and technical notices
• Verify your identity for DSC services

4.2 To Improve Our Services

• Analyze usage patterns and user behavior
• Identify popular features and tools
• Understand user preferences and needs
• Troubleshoot technical issues
• Optimize Site performance and speed
• Develop new features and services
• Conduct user research and surveys
• Improve the overall user experience

4.3 Communication and Marketing

• Send administrative emails (confirmation, updates, account changes)
• Respond to your inquiries and support requests
• Send newsletters and service announcements (if you’ve subscribed)
• Notify you about important privacy or policy changes
• Send promotional content (only with your consent where required)
• Conduct customer satisfaction surveys
• Respond to feedback and reviews

4.4 Legal and Safety Compliance

• Comply with Indian laws and regulations
• Comply with Digital Signature regulations and requirements
• Prevent, detect, and address fraud, security, or technical issues
• Enforce our Terms and Conditions and other agreements
• Protect our rights, privacy, safety, and property
• Protect users and the public from illegal or harmful activities
• Respond to legal requests and regulatory inquiries

4.5 Legitimate Business Interests

• Understand and meet user needs
• Maintain and improve our platform
• Monitor Site security and prevent unauthorized access
• Detect and prevent spam or malicious activity
• Create de-identified or anonymized data
• Statistical analysis and reporting
• Business planning and operations
• Manage customer relationships

5. Legal Basis for Processing (GDPR Compliance)

When applicable, we process your information based on:

6. Information Sharing and Disclosure

6.1 Information We Do NOT Share

We do NOT sell your personal information to third parties. We do NOT share your data with unaffiliated third parties for their marketing purposes.

6.2 When We DO Share Information

With Service Providers

We share information with trusted third parties who help us operate our Site and provide services:

• Payment Processors: For processing payments (Stripe, Razorpay, etc.)
• Hosting Providers: For hosting our website infrastructure
• Analytics Services: Google Analytics for traffic analysis
• Email Service Providers: For sending emails
• Customer Support Tools: For managing inquiries
• Certifying Authorities: For DSC issuance and verification

These service providers:

• Are bound by confidentiality agreements
• Are only allowed to use data to provide their services
• Must comply with this Privacy Policy and applicable laws
• Cannot use data for their own marketing purposes

With Advertising Partners

• Google AdSense: Serves relevant advertisements based on your visit
• Third-party ad networks: May display ads on our Site

These partners:

• Collect data independently through cookies and pixels
• Use data for ad targeting and measurement
• Have their own privacy policies
• Cannot identify you personally

With Government and Legal Authorities

We may disclose your information when:

• Required by law or court order
• Responding to regulatory inquiries
• Protecting the safety and rights of our users
• Investigating fraud or unauthorized access
• Complying with tax or legal obligations
• Public safety or national security concerns

For Business Transfers

If ProPDFWorks is sold, merged, or acquired, your information may be transferred as part of that transaction. We will notify you of any such change and provide you with choices regarding your personal data.

6.3 De-Identified and Anonymized Data

We may share aggregated, de-identified, or anonymized data that cannot identify you personally. This data may be shared with:

• Analytics services
• Business partners
• Marketing research firms
• Academic researchers
• Public reporting

7. Data Security and Protection

7.1 Security Measures

We implement comprehensive security measures to protect your personal information:

Technical Security:

• SSL/HTTPS encryption for all data transmission
• Secure server infrastructure with firewalls
• Regular security audits and penetration testing
• Intrusion detection and prevention systems
• Data encryption at rest (for stored data)
• Secure backup systems

Administrative Security:

• Limited access controls (only authorized personnel)
• Employee confidentiality and non-disclosure agreements
• Background checks for employees handling sensitive data
• Regular security training and awareness
• Incident response procedures

Operational Security:

• Regular software updates and security patches
• Malware and vulnerability scanning
• Database security hardening
• Access logs and monitoring
• Physical security of data centers

7.2 Data Breach Notification

In case of a data breach that may compromise your personal information:

• We will notify you as soon as possible
• We will provide information about the breach
• We will explain steps you can take to protect yourself
• We will comply with all notification requirements under applicable laws

7.3 Limitations of Security

While we implement strong security measures:

• No security is 100% absolute – no transmission over the Internet is completely secure
• We cannot guarantee complete protection against all security threats
• You share responsibility for security (e.g., keeping passwords confidential)
• Third parties may intercept data despite our efforts
• We are not liable for security breaches beyond our reasonable control

8. Data Retention

8.1 Retention Periods

We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy:

8.2 Deletion Requests

You can request deletion of your personal data, except where:

• Required by law (e.g., tax records)
• Necessary to complete ongoing transactions
• Required for regulatory compliance
• Needed for legal claims or dispute resolution

Upon receiving a deletion request, we will delete data within 30 days (except where exceptions apply).

9. Your Rights and Choices

9.1 Individual Rights

Depending on your location and applicable laws, you may have the following rights:

Right to Access

• Request access to your personal information
• Receive a copy of all data we hold about you
• Understand what data we process and why

Right to Rectification

• Request correction of inaccurate information
• Update incomplete data
• We will correct within 15 days

Right to Erasure (“Right to Be Forgotten”)

• Request deletion of your personal data
• Subject to legal and regulatory exceptions
• We will process requests within 30 days

Right to Restrict Processing

• Request that we limit how we use your data
• Continue storing but not processing your information
• Useful when contesting accuracy or processing legality

Right to Data Portability

• Request your data in a structured, portable format
• Transfer your information to another service
• Available in machine-readable formats (CSV, JSON, etc.)

Right to Object

• Object to direct marketing communications
• Object to certain types of processing
• Unsubscribe from newsletters with one click

Right to Withdraw Consent

• Withdraw consent for data processing anytime
• Does not affect prior processing based on consent
• Does not affect processing based on other legal bases

Right to Lodge Complaints

• File complaints with data protection authorities
• Right to legal remedy

9.2 How to Exercise Your Rights

To exercise any of these rights, contact us:

Email: [Your Email Address]
Phone: [Your Phone Number]
Mail: [Your Business Address]

Please include:

• Specific right you’re requesting
• Description of your request
• Your name and contact information
• Any relevant account details

Response Time: We aim to respond within 15-30 days (up to 30 days as per regulations).

9.3 Communication Preferences

Email Communications:

• All marketing emails include an unsubscribe link
• Click “Unsubscribe” to stop receiving promotional content
• Administrative emails cannot be unsubscribed from

Cookie Preferences:

• Manage cookies through your browser settings
• Essential cookies cannot be disabled without affecting Site functionality

Advertising Preferences:

• Opt out of personalized advertising on Google AdSense: Google Ads Settings
• Visit AboutAds.info for more options
• Opt out of Google Analytics: GA Opt-out Add-on

Location Services:

• Control location permissions in your device settings
• We do not require precise location data

10. Third-Party Services and Links

10.1 Third-Party Websites

Our Site may contain links to external websites, applications, or services operated by third parties. We have no control over these external sites and are not responsible for:

• Their privacy practices or policies
• Their content, accuracy, or safety
• Any products or services they offer
• Your interactions with third parties

We encourage you to review their privacy policies before providing your information.

10.2 Google Services

Google AdSense

We use Google AdSense to display advertisements. Google’s use of advertising cookies enables it to serve ads based on your prior visits to our Site and other websites.

• Google collects data through cookies and web beacons
• Google uses this data for ad targeting and measurement
• Google may link this data with other information about you
• Google is not bound by this Privacy Policy

Google’s Privacy Policy: https://policies.google.com/privacy
Google’s Cookie Policy: https://policies.google.com/technologies/cookies

Opt Out of Google Ads:

• Visit Google Ads Settings
• Use Google’s Opt-out Browser Add-on

Google Analytics

We use Google Analytics to analyze traffic and understand how users interact with our Site.

• Google Analytics collects information anonymously
• Reports website trends without identifying individuals
• Google Analytics uses cookies to collect data
• Information may be transmitted to Google servers (including US servers)
• Google Analytics has limited ability to identify you

Google Analytics Features Used:

• Standard analytics (pages, users, sessions, etc.)
• Demographics and interests reporting
• Device and browser data

Google’s Privacy Policy: https://policies.google.com/privacy

Opt Out of Google Analytics:

• Install Google Analytics Opt-out Browser Add-on
• Disable cookies in your browser

10.3 Social Media Platforms

If you connect your social media accounts to our Site:

• Social media platforms may track your activity
• Social platforms have their own privacy policies
• We are not responsible for social platforms’ data practices
• Review each platform’s privacy policy

10.4 Payment Processors

For DSC services, we partner with payment processors:

Authorized Partners May Include:

• Razorpay
• PayU
• Instamojo
• PhonePe Business
• Google Pay for Business
• Other PCI-DSS compliant processors

Payment Processor Responsibilities:

• Process payments securely
• Maintain PCI DSS compliance
• Protect payment card information
• Comply with RBI regulations
• Issue receipts and invoices

We do NOT store payment card information on our servers.

10.5 Certifying Authorities (For DSC Services)

For Digital Signature Certificates:

• Data is shared with authorized certifying authorities
• Certifying authorities verify your identity
• CAs issue and manage your certificates
• CAs are regulated by the Ministry of Corporate Affairs
• CAs maintain their own security and privacy practices

11. Children’s Privacy

11.1 Not for Children

Our Site is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18 years old.

11.2 If We Learn of Child Data Collection

If we learn that we have collected personal information from a child under 18:

• We will delete such information promptly
• We will notify parents/guardians if required
• We will comply with COPPA (if applicable) and Indian regulations

11.3 Parental Responsibility

Parents and guardians should:

• Monitor their children’s internet usage
• Teach children about online privacy and security
• Restrict children’s access to adult-oriented websites

If you believe we have collected information from a child, please contact us immediately at [Your Email Address].

12. International Data Transfers

12.1 Data Storage Location

Your personal information is primarily stored on servers located in India. However, data may be transferred to and processed in other countries where:

• Our service providers are located
• Google services operate
• Cloud infrastructure is hosted
• Backup systems are maintained

12.2 Cross-Border Data Transfers

When we transfer data outside of India:

• We implement appropriate safeguards (Standard Contractual Clauses)
• We ensure compliance with Indian data protection laws
• We use mechanisms approved by data protection authorities
• Recipients agree to protect data with equivalent security

12.3 Data Protection Laws

Different countries have different data protection laws. By using our Site, you acknowledge that:

• Your data may be transferred internationally
• International transfers may have different legal protections
• You consent to these transfers for providing services

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request what personal information we collect
• Right to Delete: Request deletion of your information
• Right to Opt-Out: Opt out of selling (if applicable)
• Right to Non-Discrimination: We won’t discriminate for exercising CCPA rights

To submit a CCPA request, contact: [Your Email Address]

14. European Privacy Rights (GDPR)

If you are a European resident, you have rights under the General Data Protection Regulation:

• Legal Basis: Processing is based on legitimate interests, contract, or consent
• Data Protection Officer: Contact for privacy concerns
• Supervisory Authority: Right to lodge complaints with your local data protection authority

15. Policy Changes and Updates

15.1 Changes to This Privacy Policy

We may update this Privacy Policy to:

• Reflect changes in our practices
• Comply with new laws or regulations
• Improve transparency and clarity
• Add new features or services
• Respond to technology changes

15.2 How We Notify You

For Material Changes:

• We will post the updated policy on this page
• We will update the “Last Updated” date at the top
• We will send an email notification (for significant changes)
• We will obtain your consent if required by law

For Minor Changes:

• We will simply update this page
• Continued use constitutes acceptance

15.3 Your Right to Review

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information. Check back frequently for updates.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, our privacy practices, or your personal information, please contact us:

ProPDFWorks – Privacy Team

Email: care@propdfworks.com
Website: https://propdfworks.com

Response Time: We aim to respond to all privacy-related inquiries within 48-72 hours.

Complaint Process:

1. Contact us with your concern
2. We will acknowledge receipt within 24 hours
3. We will investigate your complaint
4. We will respond with a resolution within 30 days
5. You can escalate to data protection authorities if unsatisfied

17. Acknowledgment and Consent

By using ProPDFWorks, you:

• Acknowledge that you have read and understood this Privacy Policy
• Agree to the collection and use of your information as described
• Consent to cookies and tracking technologies
• Accept that your information may be shared with third parties as described
• Understand the limitations of our security measures
• Accept international data transfers (if applicable)

18. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India, without regard to its conflict of law provisions. All disputes shall be subject to the exclusive jurisdiction of courts located in West Bengal, India.