Privacy Policy
Last updated: 6 November 2026
In short: we never exploit, sell, rent, trade or share your data in any form. Your files are used only to do what you asked: files sent to non-AI tools are deleted as soon as the result is returned, and files used with AI PDF are deleted automatically within 24 hours. No ads, no profiling, no AI training on your files.
1. Who we are
PykTools (pyktools.com) is operated by TRAN NGOC HAI, who is the controller of the personal data described here. Contact: [email protected].
Our commitment: your data is never exploited
TRAN NGOC HAI does not exploit, sell, rent, trade, exchange or share your personal data or your files in any form, and does not use them for any purpose other than performing the task you request. In particular, we never:
- sell or give your data to data brokers, advertisers or any other third party;
- use your data or files for advertising, marketing, profiling or analytics about you;
- read, review or mine the content of your files, or use them to train AI models;
- combine your data with data from other sources.
The only parties that receive your data are the service providers listed in section 4, and only as far as needed to run the tool you chose. They act on our instructions and may not use your data for their own purposes. We disclose data to authorities only when the law requires it.
2. Account data
When you sign in with Google or Facebook, we receive your name, email address and profile picture from that provider. We don't receive your password, contacts, posts or any other data from your Google or Facebook account. We use this information to identify your account, keep your credit balance, and reply to you about your account or purchases. We don't send marketing email.
We also keep your credit balance and credit history: each top-up, free credit grant and charge, with the date, the tool used and the amount of AI processing it took. This is shown to you on your account page and kept while your account exists.
3. Your files and how long we keep them
| What you use | What happens to your data | Kept for |
|---|---|---|
| PDF tools without AI (convert, merge, split, compress, edit, protect, sign…) | The file is uploaded to our server, processed, and the result is sent back to you. | Deleted when the result is returned. Not stored. |
| OCR (text recognition of scanned pages) | Images of the pages are sent to Alibaba Cloud's Qwen AI model to recognize the text. | Not stored by us after the result is returned. |
| PDF translation | The document is processed on our own translation server; its text is sent to an AI model (through OpenRouter) to be translated. | The translated file is deleted from the translation server after 1 hour. |
| AI PDF (chat with your documents) | Your files are stored in a private workspace that only your account can access. Your messages, and the parts of the documents needed to answer, are sent to the AI model of the mode you choose. If you turn on web search, the search query written by the AI is sent to Google Programmable Search (or DuckDuckGo as a fallback). | Uploaded and generated files: deleted automatically after 24 hours. Chat history: kept so you can come back to it, until you delete the conversation. |
| Feedback form | Your message, and the name and email you choose to enter, are emailed to our support inbox. | Not stored in our database; kept in our mailbox as long as needed to handle it. |
AI providers receive your content only to produce the answer for your request. We use their paid API services, which do not use API content to train their models. We never use your files to train AI models ourselves.
4. Service providers
We share data only with the providers needed to run PykTools:
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Sign-in and database | Account data, credit history, AI PDF chat history |
| Google, Meta (Facebook) | Sign-in | The sign-in itself (see section 2) |
| OVHcloud | Servers that run the website and process files | Files while they are processed |
| Cloudflare | Network delivery and protection against attacks | Your IP address and the requests passing through |
| Alibaba Cloud (Model Studio, Singapore) | Qwen AI models: AI PDF Standard mode, OCR | Content of the request |
| OpenRouter, Anthropic | AI models: AI PDF Premium mode (Claude), PDF translation | Content of the request |
| Google Programmable Search, DuckDuckGo | Web search in AI PDF, only when you turn it on | The search query |
| Creem | Payments, as reseller (Merchant of Record) | Your email and order details at checkout; card details go directly to Creem |
| Google (Gmail) | Delivering feedback messages to our inbox | Feedback messages |
Some of these providers process data outside your country, including in the United States and Singapore. Where required, they do so under appropriate safeguards such as standard contractual clauses.
5. Security and abuse prevention
Data is encrypted in transit (HTTPS). AI PDF workspaces and chat histories are only served to the account that owns them. To stop abuse, we count requests per IP address or account for a few minutes in memory; these counters are not stored.
To keep the service running and fix problems, we keep a usage log: which page or tool was used and when, whether it succeeded or failed (with the error message), how long it took, the size of the upload, the credits charged, your country (from Cloudflare), your device and browser type and the site language, and, if you are signed in, your account. It never contains your files, their names or their content, and we don't store your IP address: visitors who aren't signed in are counted with a one-way code that changes every day, without a cookie. Only the operator can see this log; it is kept for up to 180 days, deleted with your account, and never sold, shared or used for advertising.
6. Cookies
We use only the cookies and browser storage needed for sign-in and your display preferences: no advertising or tracking cookies. See the Cookie Policy.
7. Why we may use your data
We process your data to provide the service you asked for (performing our contract with you), to keep records required for payments and refunds (legal obligation), and to keep the service secure (our legitimate interest). We never sell, trade or exploit personal data, and never use it for advertising (see “Our commitment” above).
8. Your rights and deleting your data
You can ask to access, correct, export or delete your personal data, or object to how we use it. Depending on where you live (for example under the GDPR), you may also complain to your data protection authority.
How to delete your data
- AI PDF conversations: delete any conversation from the AI PDF chat history at any time.
- Uploaded files: deleted automatically as described in section 3; no action needed.
- Your whole account (including data received from Google or Facebook): email [email protected] from the address you signed in with and ask for account deletion. We delete your account, credit history and chat history and confirm within 30 days. Payment records are kept only as long as the law requires for tax and refund purposes.
- You can also remove PykTools' access from your Google account (Security → Third-party apps) or Facebook account (Settings → Apps and Websites).
9. Children
PykTools is not directed to children under 13, and we don't knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy; the date at the top shows the latest version. If a change materially affects how we use your data, we will show a notice on the website before it applies.
11. Contact
Privacy questions or requests: [email protected].