Privacy Policy

1. Types of Personal Data We Collect

Our platform (hereinafter referred to as "we") collects the following types of personal data, either independently or through third-party services. Data collection methods include active provision by users or automatic collection when using services:

• Identity-related: Name, company name, VAT number;
• Contact information: Email address;
• Account-related: Password (stored in encrypted form);
• Device and usage data: IP address, browser information, device information, city/longitude and latitude, browsing history, usage data, user statistics, etc.;
• Tracking-related: Cookies, tracker data (see Cookie Policy for details);
• Payment-related: Various data related to payment processing via WeChat/Alipay/PayPal/Stripe (subject to the privacy policies of payment service providers).

privacyPolicy.sections.dataCollect.desc2

2. Purposes and Methods of Data Processing

2.1 Processing Purposes

The personal data we collect is only used for the following legitimate purposes and in compliance with relevant laws and regulations:

• Account registration and authentication, user contact and message push;
• Advertising delivery (Google Ad Manager), data analysis (Google Analytics 4);
• Customer support and request management (Freshdesk);
• Fulfilling legal obligations, responding to law enforcement requests, protecting the legitimate rights and interests of users/platform, detecting malicious/fraudulent activities.

2.2 Processing Methods and Locations

We adopt appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of data. Data processing is completed through computer/IT tools and in accordance with strict organizational procedures.

Data processing locations include our operational offices and the locations of authorized third-party processors, which may involve cross-border transmission (e.g., countries/regions outside the user's location). All cross-border transmissions comply with local data protection regulations.

In addition to us, data may be accessible to authorized internal personnel (management, legal, system operation and maintenance, etc.) or external partners (technical service providers, hosting providers, communication institutions, etc.), all of whom are designated as compliant data processors.

3. Data Retention Period

Personal data is retained only for the period necessary to achieve the purposes of collection, and in accordance with the following rules:

• Data collected for contractual purposes: Retained until the contract is fully performed;
• Data collected for legitimate interests: Retained until the interests are realized;
• Data collected based on user consent: Retained until the user withdraws consent;
• Legal requirements: If retention needs to be extended due to legal obligations/competent authority orders, it will be implemented in accordance with the requirements.

Upon expiration of the retention period, personal data will be deleted, and users will no longer be able to exercise rights such as data access, deletion, correction, and portability.

4. Core Rights of Users

Pursuant to the General Data Protection Regulation (GDPR) and other relevant regulations, users may exercise the following rights within the scope permitted by law:

• Right to withdraw consent: Withdraw consent to personal data processing given previously at any time;
• Right to object to processing: Object to processing activities such as data analysis/advertising delivery based on legitimate interests;
• Right to access and be informed: Know whether data is being processed, obtain processing details and copies of data;
• Right to rectification: Verify the accuracy of data and request updates/corrections;
• Right to restriction of processing: Request to only store data and stop other processing activities;
• Right to erasure: Request deletion of personal data;
• Right to data portability: Obtain data in a machine-readable format and transfer it to another controller;
• Right to lodge a complaint: File a complaint with the local data protection authority.

Users may submit requests to exercise their rights through the contact information at the end of this document. All requests are free of charge, and we will respond and process them as required within 1 month.

5. Contact Information

Data Controller: MicroPDF

Contact Email: info.micropdf@zohomail.cn

Users may consult details of data processing, exercise their rights, obtain the list of third-party processors, etc., through the above methods.

6. Other Important Notes

• Cookie Policy: Our platform uses trackers (such as Cookies), see the Cookie Policy for details;
• Policy Changes: We reserve the right to modify this policy. Changes will be notified through this page, and changes involving user consent will re-collect consent;
• File Deletion: Files uploaded to the platform will be directly deleted from the server after processing is completed;
• Opt-out of Advertising: Users may opt out of interest-based advertising push as described in the Cookie Policy.