Privacy Policy
letsgoPDF (operated by Korel) is built around a simple principle: your files belong to you, and we keep them on our servers for as little time as possible.
1. What runs on your device vs our servers
Whenever possible, letsgoPDF processes files in your browser. These actions never send your files anywhere:
- Merge PDFs
- Split PDF
- Rotate pages
- Sign PDF
- Combine images into a PDF
The following actions need to run on our servers (via partner APIs) and do upload your file briefly:
- Compress, Password-protect, OCR
- Convert PDF ↔ Word / Excel / PowerPoint / Images
- Convert Word / Excel / PowerPoint to PDF
- Chat with PDF, Summarize PDF (Pro/Premium AI features)
For server-side actions, we forward your file to the conversion provider, receive the result, deliver it to you, and delete the input. Files are retained for at most 1 hour at the conversion provider, after which they are permanently deleted.
2. Information we collect
If you don't sign up: we collect only the technical data needed to deliver the Service — request logs (IP address, user agent, time of request) for abuse prevention. No cookies are used to track you across sites.
If you create an account:
- Email address (for sign-in and account recovery)
- Display name and profile photo (only if you sign in with Google)
- Conversion-history metadata (filenames, action type, timestamps — not the files themselves)
- Subscription status and billing metadata (handled by Paddle, not us)
3. Third parties we share with
We only share data when strictly necessary to operate the Service, and only with the following processors:
- Supabase — hosts our authentication, user accounts, and history database. Data residency: EU.
- Paddle — handles all billing, including the merchant of record for subscription transactions, tax compliance, and refunds. Paddle never receives your files; only billing data.
- ConvertAPI — performs server-side document conversions. Files are sent only when you trigger a server-side action; deleted within 1 hour.
- Anthropic (Claude) — powers the AI features (Chat with PDF, Summarize). The text content of your PDF is sent to Anthropic for processing the question/summary; Anthropic does not retain your data for training (per their API terms).
- Vercel — hosts the website and API endpoints. Standard request logs only.
- Google — only if you choose Google sign-in; receives your name, email, profile photo via OAuth.
4. Cookies and storage
We use browser localStorage to remember:
- Your session (so you stay signed in across reloads)
- Your theme preference (light vs dark)
- Your free-tier conversion counter (for users who haven't signed up)
- Your local conversion history (filenames + timestamps, last 50 entries)
None of this is sent to any analytics or advertising service. We use no third-party tracking cookies.
5. Your rights (GDPR, CCPA, etc.)
You have the right to:
- Access the personal data we hold about you
- Correct any inaccuracies
- Delete your account and associated data
- Export your data in a machine-readable format
- Opt out of any optional processing
To exercise any of these rights, email privacy@usekorel.com. We will respond within 30 days.
6. Data retention
Account data is kept until you delete your account. Deletion is irreversible: it removes your profile, subscription record, history, and all associated metadata within 30 days. Files processed via the server are deleted within 1 hour by the conversion provider.
Billing records are retained as required by tax/accounting laws (typically 7 years) by Paddle, our merchant of record.
7. Children
letsgoPDF is not intended for children under 13 (or the local age of digital consent, whichever is higher). We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.
8. Changes
We may update this Privacy Policy. Material changes will be announced on this page and, for account holders, by email at least 14 days before taking effect.
9. Contact
Questions or concerns: privacy@usekorel.com.