Privacy & Security

Privacy Policy & Data Protection

Effective Date: October 7, 2026 • Published by CCI Software Toolkits

Privacy First: PDF Pro Panel 3 desktop and mobile applications process 100% of documents locally on your hardware. We do not inspect, retain, or monetize your PDF files.

1. Commitment to Privacy & Local-First Philosophy

PDF Pro Panel 3 is engineered on a fundamental principle: Privacy-by-Design. We believe your sensitive contracts, financial statements, medical records, legal filings, and personal PDFs belong exclusively to you. Unlike traditional cloud converter services that ingest and inspect your documents, our desktop and mobile applications perform 100% of PDF processing operations strictly on your local hardware.

2. Local On-Device Processing vs. Cloud Web Tools

We maintain two distinct execution environments:

Local Native Applications (Windows, macOS, Android, iOS): All tools—including Merge, Split, Compress, OCR, Visual PDF Editor, Encrypt, Sign, and Convert—run entirely in your device's local memory (RAM) and local sandbox storage. Zero bytes of your files are ever uploaded or transmitted over the network.
Web Pro Cloud Platform (app.pdfpropanel.com): For users utilizing our browser-based conversion endpoints, files are transmitted via 256-bit TLS 1.3 encrypted connections directly to isolated ephemeral processing containers. Files are processed immediately and are subject to strict automatic purging.

3. Ephemeral Cloud Storage & Automatic 24-Hour Purge

For any operation performed through the Web Pro cloud servers:

Your source files and resulting output files are stored exclusively in isolated, encrypted temporary scratch directories.
All uploaded and processed documents are automatically and permanently deleted within 24 hours of upload.
You can manually delete any document from your processing queue instantly using the "Purge Now" action button.
We never create long-term archives, cold backups, or analytics copies of customer document contents.

4. Account, License & Billing Information

To deliver commercial licenses and maintain account services, we collect minimal operational information:

Account Identification: Email address, name, and password hash.
License & Activation Tokens: License keys, plan status, expiration date, and hashed device identifiers (pseudonymous) to enforce device seat limits.
Billing & Payment Data: All financial transactions are processed securely through PCI-DSS Level 1 certified processors: Stripe, PayPal, and Square. We never store raw credit card numbers, CVVs, or bank account details on our servers.

5. Zero Third-Party Advertising & No Data Brokering

We never sell, rent, monetize, or trade your personal data, document contents, or usage habits to third parties, advertising networks, or data brokers. There are zero third-party advertising SDKs or tracking pixels embedded in PDF Pro Panel 3.

6. Website & Web App Visit Statistics

To understand which pages and tools people use, we keep our own first-party visit statistics for pdfpropanel.com and app.pdfpropanel.com. They are designed so that they cannot identify you:

No cookies and no tracking identifiers. Nothing is stored in your browser to recognise you, and no Google Analytics, advertising or social-media pixels are used. These statistics are never shared with third parties.
No IP addresses stored. To count unique visitors, your IP address and browser user-agent are combined with a random key that exists for a single day and is then permanently deleted. The result is an anonymous code that cannot be traced back to you and cannot link your visits on different days.
What is recorded: the page visited (without any query string), the name of the website that linked to it, campaign tags in the link (utm_source, utm_medium, utm_campaign), an approximate country derived from your device's time-zone setting, device type, and browser and operating-system family. For the in-browser demo tools and the web tools we also record which tool was used, whether it succeeded, a file-size range and a general error category — never file names or document contents.
Retention: detailed visit records are deleted after 35 days; after that only aggregated daily totals are kept.
Opting out: visits are not counted when your browser sends a Global Privacy Control or Do Not Track signal, or after you choose "Decline" on our cookie notice. They are also not counted if your browser blocks our statistics script.
Server logs: separately, like almost every web server, ours keeps technical access logs that include IP addresses, for security and troubleshooting. They are not used for visit statistics and are deleted after 12 weeks.

7. International Regulatory Compliance

GDPR & UK DPA: Under the European General Data Protection Regulation, we operate as a Data Controller for account data and a Data Processor for ephemeral cloud files. You maintain the right to access, rectify, or request permanent deletion of your account.
CCPA / CPRA: California residents have the right to know what personal data is collected and request its deletion. We do not "sell" or "share" personal data as defined by the CCPA.
Google Play & App Store Data Safety: Our mobile apps strictly comply with Google Play's Data Safety declaration and Apple App Privacy standards.

8. Data Protection Officer & Inquiries

For inquiries regarding this Privacy Policy or to exercise your statutory data protection rights, please contact our Data Protection Officer:
CCI Software Toolkits – Privacy Team
Email: privacy@pdfpropanel.com
Legal Department: legal@pdfpropanel.com

Desktop trials, activation and licence verification

Before a direct Windows or macOS trial download, we collect your first and last name, email address, selected platform and package type. We record download times and counts, signup IP address and campaign source. When you enter your download email in the installed app, we associate first launch, trial end, latest check-in, app version, operating system, device identifier and expiry or clock-protection status with that registration. A download alone does not confirm installation. Administrators can view these records to provide support, measure downloads and manage trials. Signup does not subscribe you to marketing.

Desktop activation and renewal send a hashed device fingerprint, activation token and licence information to our service. The fingerprint is derived locally from an operating-system machine identifier; the raw machine identifier is not sent. These identifiers are pseudonymous, not anonymous, because they can be associated with your account or registration. We use them to enforce device limits, issue signed offline permissions and prevent trial or licence manipulation. Online trial reporting includes status and timing information; document contents are not included.

Signed permissions and clock records are stored locally using operating-system encryption. Licence checks do not upload your documents. We retain registration and activation records while needed to administer trials, licences, support and abuse prevention; payment records may also be retained for legal obligations. There is no automatic fixed deletion period for these operational records. You may request access, correction or deletion at privacy@pdfpropanel.com, subject to applicable recordkeeping requirements.

Store purchases are handled by Google Play, Apple or Microsoft, where available, under their respective privacy notices. Direct desktop purchases use the payment provider shown at checkout. That provider handles payment details under its own notice; we keep purchase and licence records.