Privacy Policy

Welcome to EchoPDF Ai ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, application, and services (collectively, the "Service"), including PDF editing, merging/splitting, and AI-powered summarization features.

By using EchoPDF Ai, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms, please do not access the Service.

1. Information We Collect

We collect information that you voluntarily provide to us when you register for an account, use our PDF tools, or communicate with us. We also automatically collect certain technical data for analytics, security, and advertising purposes.

• Account Information: Email address, name, and password (encrypted). If you sign up via third-party authentication (e.g., Google, Apple), we receive your public profile information.
• User Content: PDF files you upload, edit, merge, split, or submit for AI summarization. This includes text, images, and metadata contained in documents.
• Usage Data: Information such as feature usage frequency, page views, file size/type, and session duration to improve our Service.
• Payment Information: If you purchase a subscription, billing details are processed by our secure third-party payment processor (Stripe / PayPal). We do not store full credit card numbers.
• Device & Technical Data: IP address, browser type, operating system, device identifiers (e.g., Apple IDFA or Google AAID) – used for security, analytics, and advertising.
• Advertising Identifiers & Interaction Data: To support free access via ad monetization, we may collect mobile advertising IDs (IDFA/AAID), ad views, clicks, and interactions. This data is used to display relevant advertisements and measure campaign performance.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide & maintain the Service: Process PDF edits, merges, splits, and AI summaries. Store your files temporarily to enable seamless editing and sharing.
• AI Summarization: Your PDF content is sent to our AI models (or trusted third-party AI providers) solely to generate summaries, key points, and insights. We do not use your documents to train public AI models unless explicitly authorized.
• Improve & develop features: Analyze usage patterns to optimize performance and introduce new capabilities.
• Communication: Send service updates, security alerts, and respond to support inquiries.
• Security & fraud prevention: Detect unauthorized activity and ensure compliance with our Terms of Service.
• Advertising & Monetization: To keep essential features free, we partner with third-party ad networks (e.g., Google AdMob, AdSense) that use your advertising ID, device data, and general location to deliver personalized or contextual ads. Ad interaction data helps us measure revenue and optimize placements.
• Firebase Analytics & Performance Monitoring: We use Google Firebase Analytics (including Google Analytics for Firebase) to understand user behavior, track app stability, crash reports, and engagement metrics (session duration, screen views, feature usage). Firebase may collect device information (IDFA/AAID, model, OS version) in pseudonymized form to help us improve the Service.
• Legal compliance: Comply with applicable laws, regulations, or court orders.

3. Advertising & Third-Party Ad Networks

We use industry-standard advertising monetization to provide our core PDF and AI tools at no cost. Below is how advertising works within EchoPDF Ai:

• Types of Ads: We may display banner ads, rewarded video ads (e.g., earn extra credits or feature trials), interstitial ads, and native ads. All ads are served by partner platforms including but not limited to Google AdMob, Meta Audience Network, and AppLovin.
• Personalized Advertising: Based on your device's advertising identifier and interactions, ad partners may show personalized ads. You can opt out of ad personalization at any time via device settings (iOS: Settings → Privacy → Apple Advertising → turn off Personalized Ads; Android: Settings → Google → Ads → Opt out of Ads Personalization). If you opt out, you will still see ads but they will be less relevant.
• Data Shared with Ad Partners: To enable ad serving and revenue reporting, we may share advertising ID, IP address, device type, operating system, coarse location (based on IP or GPS with your permission), and ad interaction events (clicks, views). We never share the content of your PDF files or AI summaries with ad networks.
• Third-Party Privacy Policies: Ad partners collect data under their own privacy policies. We encourage you to review Google's AdMob Privacy Policy (https://policies.google.com/privacy) and any other applicable network's policy.

4. Firebase Analytics & Performance Monitoring

We integrate Google Firebase Analytics to better understand how users interact with EchoPDF Ai and to diagnose technical issues. Firebase collects the following types of data:

• Session Statistics: Number of launches, time spent, user retention, and conversion events.
• Behavioral Events: PDF uploads, AI summarization requests, merge/split actions, payment conversions, and other feature events (without file content).
• Crash Reports & Diagnostics: Error logs, device model, OS version, and app version to fix bugs and improve stability.
• Anonymized Demographics: Approximate city-level location, device language, app version.
• Firebase Data Processing: Firebase acts as a data processor under Google's Privacy Policy and security standards. We have enabled IP anonymization and data minimization settings. Firebase does not merge your Firebase analytics data with other Google advertising products unless you explicitly link them.

You can limit analytics collection via device settings or reset your advertising identifier. In certain regions, we display a consent prompt for analytics cookies/data collection on first launch. For more details, see Firebase Privacy & Security.

5. Data Retention

We retain your information only as long as necessary to fulfill the purposes outlined in this policy.

• Uploaded PDF files: Automatically deleted from our servers 30 days after your last interaction, unless you manually delete them earlier. Files stored in your account remain until you remove them or close your account.
• Account information: Retained while your account is active. If you delete your account, we remove personal data within 30 days, except where legal retention obligations apply.
• Usage & Analytics logs: Anonymized or aggregated after 12 months. Raw advertising IDs are retained no longer than 13 months unless required for fraud prevention.
• Firebase data: Retained according to Google's data retention settings (typically 2 months for event-level data, then aggregated).

6. Sharing & Disclosure

We do not sell your personal data. We may share information in the following limited circumstances:

• Service providers: Trusted third parties who assist with cloud hosting (AWS, CloudFront), AI processing, payment processing, analytics (Firebase, Google Analytics), and customer support. All providers are bound by confidentiality agreements.
• AI model providers: When you use the AI summarization feature, the content of your PDF may be transmitted to a third-party AI API (e.g., OpenAI, Anthropic) under their respective data protection terms. We ensure data is encrypted in transit and not retained by them for training.
• Ad networks & analytics partners: As detailed in Sections 3 and 4, we share limited device and interaction data with Google AdMob, Firebase, and similar partners to enable free access and improve the Service.
• Legal requirements: If required by law, subpoena, or governmental request, or to protect our rights, safety, or property.
• Business transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred. We will notify you via email or prominent notice.

7. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS 1.3) for all data transmitted between your device and our servers.
• Encryption at rest for stored files and personal information.
• Regular vulnerability scans, access controls, and strict authentication policies.
• While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet is 100% secure. You use the Service at your own risk.

8. Your Rights & Choices

Depending on your location (e.g., GDPR for EEA, UK, Switzerland; CCPA for California residents; LGPD for Brazil), you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate or incomplete information.
• Deletion: Request deletion of your account and associated data (subject to exceptions).
• Restrict processing: Limit how we use your data in certain situations.
• Data portability: Receive your data in a structured, machine-readable format.
• Withdraw consent: Where processing relies on consent (e.g., personalized ads), you may withdraw it anytime via device settings or our consent manager.
• Opt-out of sale/sharing (CCPA): We do not sell your personal data. However, you may opt out of “cross-context behavioral advertising” by enabling “Limit Ad Tracking” or “Opt out of Ads Personalization” on your device.

To exercise your rights, contact us at privacy@echopdf.ai. We will respond within 30 days. For EU residents, you also have the right to lodge a complaint with your local Data Protection Authority.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance user experience, analyze trends, remember preferences, and support advertising. You can control cookies through your browser settings. Essential cookies are required for authentication and file uploads; disabling them may affect functionality.

• Strictly necessary cookies: Enable login, session management, and security.
• Analytics cookies: Help us understand usage via Firebase and Google Analytics (anonymized IP).
• Advertising cookies / identifiers: Used to deliver relevant ads and measure effectiveness. On mobile, this is managed via your advertising ID settings.
• Preference cookies: Remember your settings and UI choices.

For more details, see our Cookie Preferences in the app footer.

10. International Data Transfers

EchoPDF Ai operates globally. Your information may be transferred to and processed in countries other than your own, including the United States. When we transfer data internationally, we rely on adequacy decisions, Standard Contractual Clauses (SCCs), or other lawful mechanisms to ensure your data remains protected.

11. Children's Privacy

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us, and we will delete it promptly.

12. Third-Party Links

The Service may contain links to external websites or services (e.g., sharing PDFs via public links). We are not responsible for the privacy practices of third parties. We encourage you to read their privacy policies.

13. Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. The "Last updated" date at the top indicates when revisions were made. We will notify you of material changes via email or a prominent notice within the Service before the changes take effect.

14. Contact Us

This Privacy Policy applies to all EchoPDF Ai services, including the web application, mobile apps, and any future integrations. By using EchoPDF Ai, you acknowledge that you have read and understood this policy, including the sections on advertising monetization and Firebase Analytics.