PDF Unfold

Your documents, explained

Privacy policy

PDF Unfold is operated by RSAngel, based in South Korea. This policy explains what happens to your information when you use the website and Google Docs add-on.

Effective 2026-09-06 · Updated September 10, 2026 · Contact trackme341@gmail.com

Files and conversion

When you start a conversion, the add-on sends the PDF you choose — or, if you paste a link, the PDF Unfold service downloads the PDF from that link — together with its filename, selected page range, OCR language settings, and any PDF password you supply to the PDF Unfold conversion service. Your PDF is processed outside your Google account.

We use this information to perform the requested conversion, return progress and error notices, and provide the result for import into a Google Doc. OCR recognizes text from scanned pages. The conversion service may create temporary page images, recognized text, and an intermediate Word document.

We do not sell document contents, use them for advertising, or use them to train general-purpose AI models. Routine conversion is automated. Human access to document contents is limited to support you explicitly authorize, necessary security investigations, or legal obligations.

Google permissions and information

The add-on requests permission to show its interface in Google Docs, connect to the conversion service, and access Drive files created or opened with the app. The Drive permission is limited to files you use with PDF Unfold; it is not permission to read every file in your Drive.

You choose whether to create a new Google Doc, replace the current document, or append pages. For appending, a DOCX copy of the current document is sent to the conversion service and combined in memory with the converted pages; this copy is not retained. The result is sent to Google Drive to update the same document. Replacement happens only when you select Replace everything. Google authorization tokens remain within the Google add-on environment and are not sent to the conversion service.

The add-on keeps a random identifier and a small history of import identifiers, document titles, and created Google Doc identifiers in your Google Apps Script user properties. These records support status recovery and prevent duplicate imports. It also derives an account identifier from your Google account's stable identifier and sends that derived identifier to the service to share your subscription and usage with the website. Existing usage is preserved when these identifiers are linked.

When you sign in on the website, Google sends an identity token to PDF Unfold. We verify it to identify your account and show the Google email you signed in with. This website sign-in does not grant access to your Drive files. We use a necessary sign-in cookie for up to 10 minutes and a signed session cookie for up to 24 hours. The session contains your derived account identifier and Google email; signing out clears it. The Google sign-in button contacts Google on the account page.

PDF Unfold uses information received from Google APIs only to provide the features described here. Its use and transfer of that information follows the Google API Services User Data Policy, including its Limited Use requirements. We do not transfer Google user data to advertising platforms or data brokers.

Account, payment, and usage records

Paid subscriptions are sold through Lemon Squeezy, our Merchant of Record. You purchase from Lemon Squeezy; we provide PDF Unfold. Lemon Squeezy collects checkout contact details, billing address, payment information, and tax information to process payments, calculate applicable taxes, prevent fraud, issue receipts, and manage subscriptions and refunds. We do not receive or store full payment card details.

Our billing database stores the derived Google account identifier, links to previous add-on identifiers, checkout references, subscription and order identifiers, plan and subscription status, relevant billing dates, refund references, and page-usage records. It also stores limited webhook event identifiers and timestamps to process billing changes reliably. We do not store the full webhook body or the customer's billing name or email in this database.

Lemon Squeezy may send customer and transaction details in payment notifications and API responses. The service processes these messages to verify purchases and update access, retaining only the billing fields described above. Billing details you send to support are handled as support correspondence.

Starting checkout from the website or add-on connects the purchase to your Google account through a server-created checkout reference. Use the same Google account in both places. Managing a subscription may require you to verify the email used at checkout with Lemon Squeezy.

How we share, transfer, and disclose Google user data

Google user data includes information received through Google sign-in, files and document contents accessed through Google Drive or Google Docs, and identifiers derived from your Google account. RSAngel processes this information to operate PDF Unfold. We share or transfer it only as described below:

  • Google: Google operates Apps Script, Google sign-in, Google Drive, and Google Docs. Google processes your authorization and stores the add-on's user properties. When you import a result, we send the converted document and its title to Google Drive so Google can create or update the Google Doc you selected. Support correspondence sent to our Gmail support address is also processed by Google. See Google's privacy policy.
  • Hetzner Online GmbH, our hosting provider: our service running on Hetzner infrastructure processes the selected PDF, its filename, conversion settings, any PDF password, temporary conversion files, and the converted document. If you append pages, it also processes the DOCX copy of your current Google Doc. The same infrastructure processes website sign-in information, derived account identifiers, usage and billing records, and operational request data. This processing is necessary to convert documents, authenticate users, and provide account access. OCR runs on our conversion service; we do not send document contents to a separate third-party OCR or AI service.
  • Lemon Squeezy, our Merchant of Record: when you choose a paid plan, we send the selected plan and a random checkout reference that lets our service associate the payment with your account. We do not send your Google identity token, raw Google account identifier, PDF or Google Docs contents, recognized text, filenames, or PDF passwords to Lemon Squeezy. You provide your checkout email, billing, and payment details directly to Lemon Squeezy; that email may be the same as your Google email if you choose to use it. See Lemon Squeezy's privacy policy.
  • The website hosting a linked PDF: when you import from a link, our server requests that link once; the hosting website sees our server's IP address and a PDF Unfold user agent, never your Google account or identity. The link is used only for that download, is not stored with the job, and is not logged or sent to analytics.
  • Google Analytics: we send pseudonymous product activity and payment events to Google for service measurement, as detailed in Website and product analytics. These events may be linked with an identifier derived separately from your account identifier. They do not contain Google email addresses, raw Google account identifiers, authorization tokens, document contents, filenames, or document links.

Access by our authorized personnel is limited to operating and protecting the service, support you explicitly authorize, or compliance with law. We may disclose relevant information to authorities or professional advisers when required by law or necessary to investigate abuse and protect the service. We do not sell Google user data, disclose it to data brokers, use it for personalized advertising, or use it to train general-purpose AI models. Any transfer of Google user data as part of a merger, acquisition, or sale of assets requires your explicit prior consent. These disclosures remain subject to the Google API Services User Data Policy and its Limited Use requirements.

Using the service involves transferring selected files from your Google add-on environment to our conversion service. Information may be processed in countries other than your own, including by Google and Lemon Squeezy under their respective policies. These countries may have different data-protection rules from your country.

How we protect Google user data and sensitive information

We apply the following safeguards to Google user data, document contents, supplied PDF passwords, and account information handled by PDF Unfold:

  • Encryption in transit: connections from your browser and the Google add-on to PDF Unfold use HTTPS with TLS 1.2 or TLS 1.3. Transfers to Google and Lemon Squeezy use HTTPS. This protects information while it travels over public networks.
  • Authentication and access checks: our service verifies Google identity tokens before creating a website session. Sessions are signed, expire after 24 hours, and use Secure and HttpOnly cookies. Requests that change account state are checked against the session and anti-forgery tokens. Conversion API requests require authentication, and uploads, jobs, and results are checked against their owning account.
  • Limited access to stored information: service credentials are held in protected server configuration and Google Apps Script properties, not in public website files. Account, billing, and analytics records are stored separately from conversion files. Storage is not publicly browsable; access is limited to the service and authorized operators. The conversion service runs as a non-root user in an isolated container with a read-only application filesystem and reduced system privileges.
  • Temporary document handling: conversion files are kept in memory-backed temporary storage, separate from persistent account records. Completed source files and intermediate files are removed after processing, and remaining results expire or are deleted after import as described in Retention and deletion. PDF passwords are used only for the requested conversion and are removed with its temporary workspace.
  • Data minimization: Drive and Docs authorization tokens stay within the Google add-on environment. We retain a derived account identifier for usage and subscription records instead of the raw Google account identifier. Document contents, supplied passwords, and authorization tokens are excluded from product analytics.

These safeguards reduce the risk of unauthorized access, alteration, or disclosure. No storage or transmission method is completely secure. If you suspect a security issue affecting your information, contact trackme341@gmail.com.

Retention and deletion

Conversion files: source PDFs, supplied PDF passwords, and intermediate files are removed from the job workspace after processing finishes. After a successful import, the add-on requests deletion of the remaining conversion result. Unclaimed results expire one hour after conversion completes while the service is running; viewing job status does not extend that time. Cleanup runs periodically; interrupted service can delay deletion until recovery.

Incomplete uploads and downloads: staged file parts expire after 15 minutes without receiving new file data, or one hour after the upload starts, whichever comes first. A download from a link is abandoned after 10 minutes, after 30 seconds without data, or when you cancel. You can cancel an upload or download to request deletion sooner. Periodic cleanup and interrupted-service recovery apply to these files too.

Created Google Docs: these remain in your Google account until you delete them. Deleting temporary service files or cancelling a subscription does not delete your Google Docs.

Account and billing records: we retain records needed to provide access, calculate usage, prevent duplicate payments and trial abuse, resolve disputes, and satisfy applicable recordkeeping requirements. You can request deletion using the contact below. If information must be retained for a legal obligation or unresolved transaction, we will explain the applicable reason.

Support and operational data: if you contact support, we receive the information you send. Servers and platform providers may process technical information such as IP addresses, request times, and error details to operate and protect the service. Do not send confidential documents or PDF passwords in a first support message.

Website and product analytics

We use Google Analytics 4 through Google Tag Manager on public marketing pages to understand visits and improve the website. Analytics loads automatically when you visit these pages. We do not display an analytics consent banner. An unexpired refusal saved through our previous banner continues to be honored until its original expiry date.

Analytics can process page views, approximate location derived by Google from your IP address, device and browser information, referral information, and interactions such as selecting a plan or opening our Marketplace listing. We also measure successful Google sign-ins, checkout creation, confirmed subscription payments and renewals, conversion starts, successful document imports, and general error categories. Payment events include the plan, invoice reference, currency, amount and tax; they never include card or bank details. We remove query strings and fragments from page and referrer URLs supplied to Analytics.

We use a pseudonymous identifier derived separately from your login credentials to connect product events. Where available, the website's Analytics visitor and session identifiers connect a visit to a later sign-in or purchase. A signed first-party analytics context cookie lasts up to 24 hours; a saved refusal lasts only until its original expiry. We do not send PDF contents, filenames, document links, passwords, text entered into the preview, Google email addresses, raw Google account identifiers, or detailed error messages to Analytics. The account page does not load Tag Manager or track form contents; lifecycle events are sent by our service. A previous unexpired refusal is also applied to linked account events after the preference is received by the service.

Undelivered analytics events are queued for up to 71 hours. Their payloads are removed after delivery or expiry; pseudonymous deduplication keys may remain for up to two years to avoid counting a retried payment or import twice. Analytics failures do not block sign-in, payment, or document import.

We use analytics for site measurement, not personalized advertising. Advertising consent remains denied, and Google signals and ad personalization are disabled in our site configuration. Google Analytics cookies such as _ga and _ga_* distinguish visits; their default lifetime can be up to two years. You can use your browser’s cookie and tracking controls to restrict analytics cookies. Existing preferences from the previous banner expire after 180 days; the current website does not save new banner preferences.

Google may process analytics information internationally under Google’s privacy policy. Learn more about Google Analytics cookie usage. Google sign-in and subscription functions do not depend on Analytics.

Your choices and rights

You choose which PDF to send or which link to import, which pages to convert, and when to create a Google Doc. You can cancel an active job from the add-on, uninstall the add-on, and revoke its access from your Google account connections.

You may request access, correction, or deletion of personal information, or raise a privacy concern, by contacting trackme341@gmail.com. We may ask for information needed to verify the request and locate the relevant add-on or billing account. Rights and response requirements depend on applicable law.

For payment information held by Lemon Squeezy as Merchant of Record, you can also contact Lemon Squeezy using the details in its privacy policy. Deleting data from PDF Unfold does not automatically delete transaction records Lemon Squeezy must keep or cancel a subscription; see our refund and cancellation policy.

The public website does not include advertising pixels. Website analytics is described above; visiting the page does not upload a PDF. External services linked from the site have their own practices.

We will update the revision date shown above when this policy changes. Material changes to how we use Google information will be disclosed before the new use, with renewed consent where required.