This Privacy Policy explains how PDFNova handles information when visitors browse the website, use document tools, change interface preferences, or contact the site owner. PDFNova is designed around browser-based processing whenever practical, which means many selected files can remain on the visitor’s device. Certain advanced tools may use optional software installed on the website’s own server and will require a temporary upload. WordPress hosting, security services, analytics, advertising, and other administrator-selected components may process limited technical data. Visitors should read this policy before using the website with confidential or regulated information.
Scope of This Privacy Policy
This policy applies to the public PDFNova website, its integrated document tools, informational pages, blog content, and contact interactions. It describes typical data flows created by the theme and explains areas that depend on the website owner’s hosting and plugin configuration. It does not automatically govern unrelated websites reached through external links or services independently chosen by a visitor. When another provider receives information under its own terms, that provider’s policy applies. The site owner should review this text after installing analytics, advertising, email marketing, payment, membership, or other features that create additional collection not described here.
Files Processed in the Browser
Many tools use browser APIs and JavaScript libraries to read and transform a file locally. In those workflows, the document is held in the browser’s memory and is not intentionally uploaded to PDFNova’s web server. Processing ends when the page is closed, refreshed, or the browser releases the data, although a downloaded result remains wherever the visitor saves it. Browser extensions, device security software, operating-system features, or managed-network tools may interact with local files independently of PDFNova. Visitors should use trusted devices and review organizational policies before processing confidential, regulated, or employer-owned documents.
Optional Server-Based Processing
Some advanced operations may require LibreOffice, QPDF, Ghostscript, or another utility installed on the website’s hosting server. When a visitor chooses such a feature, the file may be uploaded temporarily so the server can create the requested output. The theme is designed to use a temporary working location and remove processing files after the response is prepared, but server logs, backups, malware scanners, crash reports, or hosting snapshots can operate outside the theme’s direct control. The site owner should configure retention, access controls, encryption, and backups appropriately and should disclose any materially different server-processing practice.
Information Collected Automatically
Web servers normally receive technical information needed to deliver a page, such as an IP address, request time, requested URL, browser user agent, referring page, response status, and network-related details. Security tools may also record suspicious requests, failed login attempts, or rate-limit events. This information can be used to operate the website, diagnose errors, prevent abuse, and understand performance. The exact fields and retention period depend on the hosting provider and installed services. PDFNova does not require visitors to create an account for ordinary tool use, but administrators should document any later membership or login feature separately.
Contact Messages and Support Data
When a visitor sends an email or uses a contact channel, the site owner may receive the sender’s name, email address, message, subject, attachments, and technical details voluntarily included. This information is used to review and respond to the inquiry, maintain support records, prevent spam, and address legal or security concerns. Visitors should not send passwords, payment-card data, identity documents, confidential client records, or sensitive files unless a secure process has been arranged. Contact information may be stored by the website, email provider, spam filter, backup service, or ticket system according to their configured retention practices.
Cookies and Local Preferences
PDFNova may use local storage or a cookie-like browser mechanism to remember appearance preferences such as light or dark mode. WordPress, consent tools, analytics, security plugins, advertising platforms, and embedded services may set additional cookies depending on the administrator’s configuration and the visitor’s choices. Essential storage supports requested features, while optional analytics or advertising storage should be activated only when permitted and disclosed. Visitors can remove cookies through browser settings, but doing so may reset preferences or affect functions. The Cookie Policy provides more detailed information about categories, controls, and commonly used storage technologies.
Analytics and Performance Measurement
The core integrated theme does not require an analytics account, but the site owner may add privacy-conscious analytics or other measurement tools to understand traffic, page performance, and feature use. Such services can receive identifiers, approximate location derived from an IP address, device information, referral data, and interaction events. The owner should configure data minimization, consent, retention, and sharing settings consistent with applicable law. Visitors may be offered an opt-out or consent control when required. Tool usage should be measured without intentionally collecting the contents of files processed locally in the browser.
Advertising and Affiliate Links
The website may display advertising or affiliate links if the owner enables them. Advertising providers can use cookies, device information, contextual signals, or consented identifiers to select and measure ads. Affiliate links may identify that a visitor arrived at another site through PDFNova, allowing the owner to receive a commission without increasing the visitor’s price. Any active advertising relationship should be disclosed clearly and should not influence the operation of the document tools. Visitors should review the privacy choices offered by the consent interface and the policies of advertisers or merchants before providing information to those parties.
Static Libraries and Content Delivery Networks
Some browser-based tools load JavaScript libraries from a content-delivery network so the browser can perform PDF, image, spreadsheet, document, archive, or OCR operations. The network may receive ordinary request information such as the visitor’s IP address, browser user agent, time, and library URL. The selected document is not intentionally sent to that network by the PDFNova tool. Site owners who require stricter control can self-host compatible library files after confirming licenses, security updates, and functionality. External library availability and privacy practices are governed by the relevant provider, not by this theme.
How Information May Be Used
Information may be used to deliver requested pages and tools, create temporary server-based output, respond to messages, secure the website, investigate abuse, comply with valid legal obligations, maintain backups, diagnose faults, and improve accessibility or performance. The site owner should not use file contents processed locally because those contents are not intentionally received. Data collected through optional services should be limited to the purposes disclosed at collection. PDFNova does not authorize selling private document contents. Where consent is required for optional processing, visitors should be given a meaningful choice and a practical method to withdraw that consent.
Sharing and Service Providers
Limited information may be handled by hosting companies, email providers, security vendors, backup services, content-delivery networks, analytics providers, advertising partners, or professional advisers that support the website. These providers receive only the information necessary for their function, subject to their contracts and policies. Information may also be disclosed when reasonably necessary to comply with law, enforce website terms, protect rights and safety, or respond to a valid legal process. The owner should evaluate providers before use and should avoid granting broad access to temporary files, support messages, logs, or administrative systems.
Retention and Deletion
Retention depends on the type of information and the systems involved. Locally processed files remain under the visitor’s control. Temporary server files are intended to be removed after processing, while technical logs, backups, cached pages, security events, contact messages, and legal records may remain for different periods. The site owner should establish schedules based on operational need, security, legal obligations, and storage limits. Deletion from an active system may not immediately remove a copy from a protected backup, although backup copies should expire under the applicable cycle and should not be restored for ordinary use after a valid deletion request.
Security Measures
Reasonable security practices may include HTTPS, limited administrator access, strong authentication, software updates, malware scanning, web-application firewalls, backups, logging, and separation of temporary processing files. No website, browser, email system, or storage method can be guaranteed completely secure. Visitors are responsible for using trusted devices, protecting passwords, reviewing downloads, and keeping original files. Highly sensitive or regulated information may require an approved internal system, encrypted enterprise service, or professional workflow rather than a public tool. Security incidents that materially affect personal information should be handled according to applicable notification requirements.
International Data Transfers
Hosting companies and service providers may process technical or contact information in countries different from the visitor’s location. Privacy protections and government-access rules vary by jurisdiction. When required, the site owner should use appropriate contracts, transfer mechanisms, provider assessments, or localized services. Browser-local processing can reduce the amount of document content transferred, but ordinary web requests still travel through networks and infrastructure. Visitors who are subject to organizational or regulatory restrictions should confirm where the website and its active service providers operate before submitting contact information or choosing an optional server-based tool.
Privacy Rights and Requests
Depending on location, a visitor may have rights to request access, correction, deletion, restriction, portability, objection, or information about certain processing. These rights are not absolute and may require identity verification or may be limited by security, legal, or recordkeeping obligations. A request should identify the relevant interaction, such as a support email, without sending unnecessary sensitive data. Because locally processed files are not intentionally received by PDFNova, the site owner normally cannot retrieve or delete those files. Requests can be sent through the Contact Us page and will be evaluated under applicable law.
Children and Sensitive Information
PDFNova is a general document utility and is not intentionally directed to young children. Visitors should not submit children’s personal information or highly sensitive records through public contact channels. Parents, guardians, schools, and organizations should supervise use and follow applicable consent and data-protection requirements. The tools should not be treated as an approved repository for medical records, government identification, financial account data, or confidential case files. When the nature of a document creates special legal or contractual duties, use a system specifically reviewed and authorized for that category of information.
Policy Changes and Contact
This policy may be revised when website features, service providers, legal requirements, or data practices change. Material updates should be reflected on this page, and additional notice may be provided when required. Continued use after an update does not replace consent where consent is legally necessary. Questions about this policy, active service providers, or privacy requests can be sent through the Contact Us page. Visitors should describe the relevant page or interaction and should avoid attaching the private document itself unless a secure support arrangement has been established.