Privacy policy

Files and conversion

When you start a conversion, the add-on sends the PDF you choose, its filename, selected page range, OCR language settings, and any PDF password you supply to the PDF Unfold conversion service. Your PDF is processed outside your Google account.

We use this information to perform the requested conversion, return progress and error notices, and provide the result for import into a Google Doc. OCR recognizes text from scanned pages. The conversion service may create temporary page images, recognized text, and an intermediate Word document.

We do not sell document contents, use them for advertising, or use them to train general-purpose AI models. Routine conversion is automated. Human access to document contents is limited to support you explicitly authorize, necessary security investigations, or legal obligations.

Google permissions and information

The add-on requests permission to show its interface in Google Docs, connect to the conversion service, and access Drive files created or opened with the app. The Drive permission is limited to files you use with PDF Unfold; it is not permission to read every file in your Drive.

You choose whether to create a new Google Doc, replace the current document, or append pages. For appending, a DOCX copy of the current document is sent to the conversion service and combined in memory with the converted pages; this copy is not retained. The result is sent to Google Drive to update the same document. Replacement happens only when you select Replace everything. Google authorization tokens remain within the Google add-on environment and are not sent to the conversion service.

The add-on keeps a random identifier and a small history of import identifiers, document titles, and created Google Doc identifiers in your Google Apps Script user properties. These records support status recovery and prevent duplicate imports. It also derives an account identifier from your Google account's stable identifier and sends that derived identifier to the service to share your subscription and usage with the website. Existing usage is preserved when these identifiers are linked.

When you sign in on the website, Google sends an identity token to PDF Unfold. We verify it to identify your account and show the Google email you signed in with. This website sign-in does not grant access to your Drive files. We use a necessary sign-in cookie for up to 10 minutes and a signed session cookie for up to 24 hours. The session contains your derived account identifier and Google email; signing out clears it. The Google sign-in button contacts Google on the account page.

PDF Unfold uses information received from Google APIs only to provide the features described here. Its use and transfer of that information follows the Google API Services User Data Policy, including its Limited Use requirements. We do not transfer Google user data to advertising platforms or data brokers.

Account, payment, and usage records

Paid subscriptions are sold through Lemon Squeezy, our Merchant of Record. You purchase from Lemon Squeezy; we provide PDF Unfold. Lemon Squeezy collects checkout contact details, billing address, payment information, and tax information to process payments, calculate applicable taxes, prevent fraud, issue receipts, and manage subscriptions and refunds. We do not receive or store full payment card details.

Our billing database stores the derived Google account identifier, links to previous add-on identifiers, checkout references, subscription and order identifiers, plan and subscription status, relevant billing dates, refund references, and page-usage records. It also stores limited webhook event identifiers and timestamps to process billing changes reliably. We do not store the full webhook body or the customer's billing name or email in this database.

Lemon Squeezy may send customer and transaction details in payment notifications and API responses. The service processes these messages to verify purchases and update access, retaining only the billing fields described above. Billing details you send to support are handled as support correspondence.

Starting checkout from the website or add-on connects the purchase to your Google account through a server-created checkout reference. Use the same Google account in both places. Managing a subscription may require you to verify the email used at checkout with Lemon Squeezy.

Google supplies the add-on platform, authentication, Drive storage, and Google Docs import. Hetzner provides hosting for our conversion service and billing database. Lemon Squeezy supplies checkout, tax handling, payment records, and subscription services as Merchant of Record. We do not send PDF contents, recognized text, Google Docs contents, or PDF passwords to Lemon Squeezy.

Using the service involves transferring selected files from your Google add-on environment to our conversion service. Information may be processed in countries other than your own, including by Google and Lemon Squeezy under their respective policies. These countries may have different data-protection rules from your country.

Google Docs you create remain subject to your Google account settings and Google's privacy policy. Billing information held by Lemon Squeezy is covered by its privacy policy. We may also disclose information when required by law or when necessary to protect the service from abuse.

Retention and deletion

Conversion files: source PDFs, supplied PDF passwords, and intermediate files are removed from the job workspace after processing finishes. After a successful import, the add-on requests deletion of the remaining conversion result. Unclaimed results expire one hour after conversion completes while the service is running; viewing job status does not extend that time. Cleanup runs periodically; interrupted service can delay deletion until recovery.

Incomplete uploads: staged file parts expire after 15 minutes without receiving new file data, or one hour after the upload starts, whichever comes first. You can cancel an upload to request deletion sooner. Periodic cleanup and interrupted-service recovery apply to these files too.

Created Google Docs: these remain in your Google account until you delete them. Deleting temporary service files or cancelling a subscription does not delete your Google Docs.

Account and billing records: we retain records needed to provide access, calculate usage, prevent duplicate payments and trial abuse, resolve disputes, and satisfy applicable recordkeeping requirements. You can request deletion using the contact below. If information must be retained for a legal obligation or unresolved transaction, we will explain the applicable reason.

Support and operational data: if you contact support, we receive the information you send. Servers and platform providers may process technical information such as IP addresses, request times, and error details to operate and protect the service. Do not send confidential documents or PDF passwords in a first support message.

Website and product analytics

We use Google Analytics 4 through Google Tag Manager on public marketing pages to understand visits and improve the website. Analytics loads automatically when you visit these pages. We do not display an analytics consent banner. An unexpired refusal saved through our previous banner continues to be honored until its original expiry date.

Analytics can process page views, approximate location derived by Google from your IP address, device and browser information, referral information, and interactions such as selecting a plan or opening our Marketplace listing. We also measure successful Google sign-ins, checkout creation, confirmed subscription payments and renewals, conversion starts, successful document imports, and general error categories. Payment events include the plan, invoice reference, currency, amount and tax; they never include card or bank details. We remove query strings and fragments from page and referrer URLs supplied to Analytics.

We use a pseudonymous identifier derived separately from your login credentials to connect product events. Where available, the website's Analytics visitor and session identifiers connect a visit to a later sign-in or purchase. A signed first-party analytics context cookie lasts up to 24 hours; a saved refusal lasts only until its original expiry. We do not send PDF contents, filenames, document links, passwords, text entered into the preview, Google email addresses, raw Google account identifiers, or detailed error messages to Analytics. The account page does not load Tag Manager or track form contents; lifecycle events are sent by our service. A previous unexpired refusal is also applied to linked account events after the preference is received by the service.

Undelivered analytics events are queued for up to 71 hours. Their payloads are removed after delivery or expiry; pseudonymous deduplication keys may remain for up to two years to avoid counting a retried payment or import twice. Analytics failures do not block sign-in, payment, or document import.

We use analytics for site measurement, not personalized advertising. Advertising consent remains denied, and Google signals and ad personalization are disabled in our site configuration. Google Analytics cookies such as _ga and _ga_* distinguish visits; their default lifetime can be up to two years. You can use your browser’s cookie and tracking controls to restrict analytics cookies. Existing preferences from the previous banner expire after 180 days; the current website does not save new banner preferences.

Google may process analytics information internationally under Google’s privacy policy. Learn more about Google Analytics cookie usage. Google sign-in and subscription functions do not depend on Analytics.

Your choices and rights

You choose which PDF to send, which pages to convert, and when to create a Google Doc. You can cancel an active job from the add-on, uninstall the add-on, and revoke its access from your Google account connections.

You may request access, correction, or deletion of personal information, or raise a privacy concern, by contacting trackme341@gmail.com. We may ask for information needed to verify the request and locate the relevant add-on or billing account. Rights and response requirements depend on applicable law.

For payment information held by Lemon Squeezy as Merchant of Record, you can also contact Lemon Squeezy using the details in its privacy policy. Deleting data from PDF Unfold does not automatically delete transaction records Lemon Squeezy must keep or cancel a subscription; see our refund and cancellation policy.

The public website does not include advertising pixels. Website analytics is described above; visiting the page does not upload a PDF. External services linked from the site have their own practices.

We will update the revision date shown above when this policy changes. Material changes to how we use Google information will be disclosed before the new use, with renewed consent where required.