Privacy Policy
Effective date: July 19, 2026
Universal PDF is built around a simple idea: the less of your data we handle, the better. This policy explains, in plain English, what happens to your files and what information we keep.
How your files are processed
Our tools work in one of three ways, and each tool tells you which applies:
Browser-local tools. Most of our tools run entirely in your browser. Your files are opened and processed on your own device and are never uploaded — we cannot see them, and they never leave your computer. Nothing uploads unless you choose to email your result or save it to My Files.
Server-powered tools. Some conversions need more processing power than a browser can provide. For those, your file is uploaded over an encrypted (TLS) connection, processed, and returned to you. We keep your files only as long as needed to provide the service; you can delete them anytime from your account, or request deletion. We do not read, analyze, or share the contents of your files ourselves, and we do not use them to train any models.
AI-powered tools. A small number of tools use artificial intelligence to process your content: our PDF and book summarizers, translation, and audio and video transcription. These work like server-powered tools (your file uploads over an encrypted connection) and in addition, the extracted text or audio is sent to a third-party AI provider so it can generate the result. That provider processes it to return your result and does not use it to train its models. We do not name the provider in this policy, but disclose the category of recipient as required by applicable law; you can request more detail by contacting us below.
Who we are
Universal PDF is operated by Villerise Ltd, Company No. 15768976, registered in England & Wales. Villerise Ltd acts as the data controller for the personal data described in this policy. You can reach us at support@universalpdf.com or by phone at +44 020 8092 2427.
What we store
If you create an account, we store your email address and authentication details through our provider, Supabase. If you subscribe, payments are handled by Stripe. We never see or store your card number; Stripe shares only your subscription status and billing contact details with us.
We do not sell your personal data to anyone, and we do not share it with third parties except the service providers named above and, for AI-powered tools, the third-party AI provider described above, all used to operate the product.
Our legal bases for using your data
If you are in the UK or EU, data-protection law asks us to have a "lawful basis" for each thing we do with your personal data. Here is what we rely on:
Providing the tools you use. Running the tools, processing any files you upload, and — for our AI tools — sending the extracted text or audio to our AI provider to generate the result you asked for. Basis: performing our contract with you. (Handling your content with our AI provider is how we deliver the result you requested, so this is part of our contract, not something separate you opt into.)
Your account and payments. Creating your account, signing you in, taking payment, and managing your subscription. Basis: performing our contract with you.
Keeping the service safe and working. Preventing fraud and abuse, keeping the service secure, fixing problems, and understanding how the product performs. Basis: our legitimate interest in running a secure, reliable service.
Analytics and advertising cookies. Measuring how our tools are used and how our ads perform. Basis: your consent, which you can give or withdraw at any time.
Meeting our legal duties. For example, keeping records we are required to keep and responding to lawful requests. Basis: complying with a legal obligation.
Where your data is processed
Some of our providers process data outside the UK and EEA, mainly in the United States. Whenever personal data moves outside the UK or EEA, we rely on the safeguards the law requires — such as the UK's International Data Transfer Agreement (or Addendum), the EU Standard Contractual Clauses, or a formal finding that the destination country offers adequate protection.
This applies to the kinds of provider described in this policy: our authentication and storage provider, our payments provider, our email provider, and — for AI tools — our third-party AI provider. As elsewhere in this policy, we describe these by category; you can ask us for more detail at support@universalpdf.com.
US state privacy rights
If you live in California or another US state with a privacy law, this section is for you.
What we collect. Identifiers (such as your email address), commercial information (such as your subscription and payment status), and internet activity (such as how you use our tools, collected through analytics and advertising cookies when you allow them).
No sale for money. We do not sell your personal information for money. Some advertising cookies may "share" information for cross-context advertising — but only if you consent, and you can stop it at any time using the "Do Not Sell or Share My Personal Information" link in our footer, or by turning on Global Privacy Control in your browser, which we honor automatically.
Your rights. You can ask us what we collect (know), delete it, or correct it, and you can opt out of sharing for targeted advertising. Email support@universalpdf.com to use these rights. We won't treat you differently for exercising them.
Cookies
We use essential cookies to keep you signed in and maintain your session. With your consent, we also use analytics cookies (Google Analytics and Microsoft Clarity) to understand how our tools are used, and advertising cookies (such as Google and Meta) to measure our ad campaigns and attribute sign-ups. You can accept or decline these when you first visit, and change your choice anytime via “Cookie settings” in the footer. We automatically honor Global Privacy Control browser signals, and we never sell your personal data.
Your rights
If you are in the UK or EU, you have rights over your personal data. You can ask us to:
- show you the data we hold about you (access);
- correct anything that's wrong (rectification);
- delete your data (erasure);
- pause or limit how we use it (restriction);
- object to certain uses, including any direct marketing (objection);
- send you a copy in a portable format so you can reuse it elsewhere (portability); and
- withdraw a consent you gave, at any time (this doesn't undo anything we did before you withdrew it).
To use any of these, email support@universalpdf.com from the address on your account, and we'll respond within 30 days. You can change your cookie choices at any time using "Cookie settings" in the footer.
If you're unhappy with how we've handled your data, you can complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk, or to the data-protection authority where you live in the EEA. We'd appreciate the chance to put things right first, so please do come to us.
Children
Universal PDF is not intended for children. You must be at least 16 years old to use it, or older if that is the age of digital consent where you live. We do not knowingly collect personal data from children under that age. If you believe a child has given us their data, email support@universalpdf.com and we will delete it.
Changes to this policy
If we make material changes to this policy, we will update the effective date above and, where appropriate, notify account holders by email.
Contact
Questions about privacy? Email us at support@universalpdf.com.