Privacy Notice

Effective 30 July 2026

1. Controller and contact

Lexicologist Ltd is the controller for PayperPDF. Company number: 12640738. Registered office: C/O Taxevo, 1 Cedar Office Park, Cobham Road, Wimborne, England, BH21 7SB.

For privacy questions or to exercise your rights, email support@lexicologist.ltd or use our support page.

2. Data we use

Account data: email address, display name, account and organisation identifiers, authentication events and account settings.
Purchase data: packs purchased, amounts, currency, invoice/payment references, payment status and credit ledger. Stripe collects card data directly; we do not receive or store the full card number.
Service data: requested PDF action, credit cost, timestamps, result status and technical request identifiers.
PDF contents: files supplied for the requested operation and the generated result while that request is being processed.
Technical and support data: IP address, browser/request information, security logs, correspondence and information you choose to provide to support.

3. Purposes and lawful bases

Contract: create and authenticate your account, process PDFs, deliver downloads, manage credits and payments, and provide support.
Legal obligation: keep accounting records, handle statutory rights, and respond to lawful requests.
Legitimate interests: secure and troubleshoot the service, prevent fraud, maintain an audit trail and improve reliability. We balance these interests against your rights.
Consent: only where we specifically ask for it. You may withdraw consent at any time without affecting earlier processing.

Account and payment information is required to purchase and use credits. Without it, we cannot provide the paid service.

4. PDF processing

PDFs are uploaded over encrypted HTTPS and processed server-side to perform the action you select. The current request-based tools hold input and output only for the duration of processing and download; the application does not intentionally save PDF contents to a document store. We do not use PDF contents for advertising, model training or unrelated analysis.

A failed network connection may cause temporary buffering by hosting infrastructure. Do not upload special-category, criminal-offence, national-security or other highly confidential data unless you have assessed the service as appropriate and have a lawful basis.

5. Recipients and processors

We use service providers only where needed to operate the service, including Stripe for hosted payments; Microsoft Azure for API and database hosting; Vercel or equivalent web hosting for the website; Resend for service email; and Better Stack for operational logging. Professional advisers and public authorities may receive limited data where legally necessary.

These providers act under their own terms and data-protection obligations. We do not sell personal data.

6. International transfers

Some providers may process data outside the UK. Where UK adequacy regulations do not apply, we rely on safeguards such as the UK International Data Transfer Agreement or UK Addendum to standard contractual clauses, together with transfer-risk assessments where required. Contact us for more information about the relevant safeguard.

7. Retention

PDF contents: not intentionally retained beyond the processing/download request.
Account/profile data: while the account is open, then normally deleted or anonymised within 30 days of an accepted closure request.
Invoices, payment and credit-ledger records: normally six years after the relevant accounting period, where needed for tax, accounting, disputes or fraud prevention.
Support correspondence: normally two years after the request closes.
Operational and security logs: normally 30 days, unless an incident, legal duty or fraud investigation requires longer retention.

We may retain a minimal suppression or audit record where required to demonstrate compliance or prevent abuse.

8. Cookies

We currently use only cookies and similar storage that are necessary for authentication, security, credit state and user-requested interface settings. We do not currently use advertising cookies. If we introduce non-essential analytics, we will ask for consent before setting them.

9. Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction, portability or object to processing. You may also withdraw consent and complain to the Information Commissioner’s Office. We normally respond within one month and may need to verify your identity.

Contact support@lexicologist.ltd. You can also complain to the ICO, although we would appreciate the opportunity to address the issue first.

10. Security and changes

We use access controls, encrypted transport, restricted production access, monitoring and payment-provider separation. No internet service can guarantee absolute security. We will update the effective date when this notice materially changes and notify account holders where appropriate.