Privacy policy

Your document storage choices

Without an account, PDFs up to 5 MB and reading positions are stored locally in this browser so the document can reopen after refresh. This does not upload the PDF to your account. New PDFs opened while signed in automatically save to that account, up to 20 MB. Samples never upload. Signing in alone does not upload an already-open guest PDF; choosing to save uploads that PDF and its extracted text to private Cloudflare R2 storage and saves its listening checkpoint in Cloudflare D1, scoped to your account. Account PDFs retain browser copies and offline checkpoints for reconnecting. Voice preferences stay in this browser. Notes and highlights require an account and a saved account PDF. Both Free and Pro notes, selected passages, annotations, and passage locations are stored server-side in an account-owned Cloudflare Durable Object database and retrieved across devices. Ordinary unsaved drafts stay in memory until you save them. When an action requires login, a temporary session-storage record preserves that draft and selected passage for up to ten minutes so the action can continue after login or a reload. It is removed after continuation, draft dismissal, or switching documents. Legacy browser scratchpads are preserved until successfully imported. Share-card images are generated on your device; downloading does not automatically publish them.

Clearing this site’s browser data removes local copies and pending changes; it does not delete PDFs saved to your account. Deleting an account PDF removes its cloud file, extracted text, reading position, and notes. Offline copies on other devices remain on those devices, but cannot recreate the deleted account entry. We retain account-scoped deletion markers to enforce this. Browser-only document links work only in the browser where they were saved.

Voice processing

Pro Natural narration sends sentence text through our Cloudflare API to Modal for speech generation. Completed audio is stored in private Cloudflare R2 storage, separated by account, model version, voice, language, and input text. Saved audio is reused only within the same account and has no automatic expiry. Removing a document or clearing browser storage does not delete this server-held audio; contact support to request deletion.

The free Generic voice uses your browser or operating system’s speech service. Some voices use online processing supplied by that platform and may send text to its provider. Available voices and their privacy practices depend on your browser and operating system.

Accounts and subscriptions

If you sign in with Google, we receive your verified account identifier, name, and email. We store account and session information, including authentication tokens protected on the server, session dates, and security information such as IP address and browser details. We use this information to sign you in, protect accounts, provide support, and verify Pro access.

Polar handles checkout as merchant of record. We share your account identifier, name, and email to link your purchase to your account, and receive customer, order, and subscription status information needed for billing and access. Polar and its payment providers handle payment-card and billing details under Polar’s privacy policy. We don’t receive full payment-card numbers.

Cloudflare hosts the site, API, and account database and processes network and security information needed to operate them. Google provides sign-in under Google’s privacy policy. These providers may process information in countries other than your own.

Usage analytics and browser storage

We use PostHog to understand visits, page navigation, account creation, completed Pro purchases, playback startup latency, and upload failures. Upload failure events include file size, applicable limit, account tier and a fixed error category, without filenames or file contents. Playback measurements include elapsed time, outcome, model, and whether audio was reused; they do not include document text or audio. Pageview events can include the page path, referrer without query parameters, device and browser information, and a pseudonymous browser identifier stored locally. We strip URL query parameters and fragments, including local document IDs and sign-in parameters. Network services also receive IP addresses when handling requests.

When you sign in, we link analytics to your internal account identifier to create a pseudonymous person profile and understand usage across visits and devices. Signup and purchase events use that same account identifier. Purchase analytics include order reference, plan, paid amount, currency, and whether the order is an initial purchase, renewal, or adjustment. We may route selected events to a private Discord channel for operational notifications. We reset the browser’s analytics identity when you log out or your session expires. We do not send PDF content, filenames, notes, names, email addresses, or Google credentials to analytics. Session replay and automatic click capture are disabled. We do not sell personal information or use it for targeted advertising.

Essential sign-in cookies maintain your account session; browser storage also holds saved documents, preferences, and pending checkout state. You can block analytics with browser controls or an analytics blocker. Clearing site data also removes your locally saved PDFs and signs you out.

Retention and your choices

Guest documents and reading positions remain in this browser until its site data is cleared. Browser-only documents are not automatically deleted. Account PDFs and checkpoints have no automatic expiry and remain until explicitly deleted. Server account and subscription records are kept while needed to operate your account and satisfy security, accounting, and legal obligations. Polar retains payment records under its own policy.

To request access, correction, or deletion of server-held account data, or to ask a privacy question, email support@pdf2talk.com from the account’s email address. We may verify your identity. Account deletion does not remove files stored in your browser; remove those locally. Cancel recurring billing separately before requesting account deletion.

Depending on your location, you may have additional privacy rights, including the right to object to processing or complain to a data-protection authority. We’ll handle requests in accordance with applicable law. We’ll update this page when our practices change and provide notice of material changes.