Política de privacidade

This Privacy Policy explains what personal data Arawa PDF collects when you use arawapdf.com (the "Service"), how we use it, and the rights you have over it. It applies to all visitors and registered users.

We aim for plain English. If anything is unclear, write to support@arawapdf.com and we'll explain.

For a focused, verifiable accounting of what we log and don't log on every page view, see our Anonymous Mode page at /privacy/anonymous. It's the most precise statement of our privacy practice.

Arawa PDF, operating from the Islamic Republic of Pakistan at arawapdf.com, is the data controller for the personal data described here — the entity that decides what data is collected and what it's used for. You can reach us at support@arawapdf.com.

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with a dedicated representative requirement (e.g. GDPR Article 27), see section 8 for our cross-border transfer mechanism.

Account data — your email address, first and last name, and a password (stored only as an Argon2id hash, never in plain text). Optional: country, timezone, language preference. Used to identify you and to deliver the Service.

Authentication data — session identifiers, optional TOTP 2FA secret, optional OAuth identity (Google or Facebook user ID when you sign in with those). Used to keep you signed in and to secure your account.

Files you upload — the documents you submit to the tools. Used only to perform the action you requested. See section 5.

Usage and security data — IP address and user-agent from each request, processed for rate limiting, abuse detection, and security logging.

Billing data — if you subscribe to Premium, your billing details are collected and processed by Stripe. We see the subscription status, plan, and invoice metadata; we do not see or store payment card numbers.

Signature audit trail — if you send or sign a document through the Sign PDF feature, we record the signer's name, email, IP, and timestamps in an audit log linked to that envelope.

Our home framework is the body of Pakistani privacy law — Article 14 of the Constitution of Pakistan (right to privacy), the Prevention of Electronic Crimes Act 2016 (PECA), and the Personal Data Protection Bill (PDPB) currently progressing through the Pakistani legislature. Once the PDPB is enacted as the Personal Data Protection Act, it will become our primary statutory framework. For users outside Pakistan, we additionally rely on the equivalent grounds under GDPR / UK GDPR / CCPA so the same processing is lawful wherever you are.

Our grounds for processing your personal data are: necessity for a contract or service we provide to you (GDPR Art. 6(1)(b); equivalent under draft Pakistan PDPB) — running your account and executing the tools you ask us to run; legitimate interests (GDPR Art. 6(1)(f); equivalent under draft Pakistan PDPB) — security, anti-abuse, rate limiting, fraud prevention, with a right to object at any time; consent (GDPR Art. 6(1)(a); equivalent under draft Pakistan PDPB) — non-essential cookies and any future marketing emails, withdrawable at any time without affecting prior processing; and legal obligation (GDPR Art. 6(1)(c); applicable Pakistani tax, banking, and electronic-transaction laws) — tax records, retention required by payment processors, responses to lawful requests.

This is the most sensitive part of the Service. Files are encrypted at rest on our storage and transmitted over TLS in transit. Files are automatically and permanently deleted one hour after processing — no backup is retained beyond that window. The one-hour TTL is a deliberate design choice to minimise the time your data is on our systems.

Arawa PDF staff cannot read your file contents during normal operation; encryption-at-rest keys are managed by the storage layer.

If you use the AI features (Summarize, Translate), the extracted text of your document is sent to Anthropic PBC's API for processing. See section 7.

Uploaded files and outputs: 1 hour, then permanent deletion.

Account profile: until you delete your account, then a 30-day grace period, then permanent deletion.

Session and log data: 90 days, then aggregated to non-personal counts.

Stripe invoice records: as required by Stripe and applicable tax law (typically 7 years).

Signature audit trail: as long as the envelope exists, deleted with the envelope.

You can delete your account at any time from /user. Some records (such as Stripe invoices) cannot be deleted on request because we are legally required to retain them.

We do not sell your data and we do not share it for advertising. We use a small number of service providers to operate the Service:

Hetzner Online GmbH — infrastructure provider. Hosts our servers and storage in their Ashburn, Virginia (USA) data centre.

Stripe, Inc. — payment processing. Receives your billing data when you subscribe. Stripe is PCI-DSS Level 1 certified.

Anthropic PBC — large-language-model provider. Receives the extracted text of your document only when you use the Summarize or Translate features. Anthropic states it does not use API inputs to train its models.

Google LLC — analytics provider (Google Analytics 4). Loads only if you choose "Accept all" in the cookie banner, and then receives anonymous, aggregate usage data with your IP address anonymized. It never receives your files, file names, or file contents. Google may process this data in the United States. See section 13.

An SMTP email provider (to be selected) — used to send verification and password-reset emails. We will update this section when finalised.

We disclose data to other parties only when required by law (for example, a valid court order) or to protect the rights, property, or safety of Arawa PDF, our users, or the public.

Arawa PDF operates from the Islamic Republic of Pakistan, and our servers are located in the United States (Hetzner Cloud, Ashburn, Virginia). This means all personal data processed by the Service is transferred cross-border at least once — from where it is collected (your country) to our infrastructure (the US), and accessed from the controller's location (Pakistan).

For data collected from users in Pakistan: cross-border transfer of personal data is governed by the Personal Data Protection Bill (PDPB) once enacted, and in the interim by the Prevention of Electronic Crimes Act 2016 (PECA) and general principles of confidentiality. The draft PDPB permits transfers where appropriate safeguards are in place. We use contractual safeguards equivalent to the EU Standard Contractual Clauses with our sub-processors, and will adapt to the final PDPB requirements once enacted.

For data collected from users in the EU/EEA and UK: we rely on the European Commission's Standard Contractual Clauses (SCCs) with our sub-processors, and the UK's International Data Transfer Addendum where applicable.

For data collected from users in the United States: the data remains in the United States. California residents retain their CCPA rights described in section 11.

Subject to applicable law, you have the right to: access the personal data we hold about you; correct inaccurate or incomplete data; delete your account and the personal data we hold (subject to retention obligations in section 6); restrict or object to specific processing; receive a copy of your data in a portable format; withdraw consent at any time without affecting prior lawful processing; lodge a complaint with your local data-protection authority.

To exercise any of these rights, write to support@arawapdf.com. We will respond within 30 days (or 45 if extended, with notice).

If you are in Pakistan, you have privacy protections under Article 14 of the Constitution of Pakistan, the Prevention of Electronic Crimes Act 2016 (PECA), and — once enacted — the Personal Data Protection Bill (PDPB). As a matter of policy, we honour the following rights for Pakistani users now, ahead of the PDPB becoming statutory: the right to be informed about the legal basis and purpose of processing; the right of access — request a copy of the personal data we hold about you; the right of correction — request that we update inaccurate or incomplete data; the right of destruction — request that we delete your personal data where it is no longer needed for the original purpose or where you have withdrawn consent; and the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, write to support@arawapdf.com. Once the PDPB is enacted and the National Commission for Personal Data Protection becomes operational, you will additionally have the right to lodge a statutory complaint with that authority.

If you are a California resident, you have additional rights: right to know what personal information we have collected, used, disclosed, and (if applicable) sold or shared (we do not sell or share for cross-context behavioural advertising); right to delete the personal information we have collected, subject to legal exceptions; right to correct inaccurate personal information; right to opt out of the sale or sharing of personal information (not applicable — we do neither); right to non-discrimination for exercising any of these rights.

Send requests to support@arawapdf.com. We may verify your identity before responding.

We use industry-standard measures to protect your data: Argon2id password hashing (current best-practice algorithm); two-factor authentication available on every account; TLS in transit, encryption at rest; per-IP rate limiting and magic-byte file-type checks on every upload; strict Content Security Policy and HSTS preload; non-root containerised workers with sandboxed processing.

No system is perfectly secure. We notify affected users without undue delay if we identify a personal-data breach likely to result in risk to their rights.

We use Google Analytics 4, provided by Google LLC, to understand how the site is used in aggregate — for example, which pages are viewed, the approximate region a visit comes from, and the broad device and browser mix. This helps us improve the Service.

Analytics is off by default and consent-based. Google Analytics loads only after you choose "Accept all" in the cookie banner. If you choose "Reject non-essential" — which is also what applies until you make a choice — no Google script loads, no Google cookies are set, and no data is sent to Google.

When it is enabled, we configure Google Analytics with IP anonymization (anonymize_ip), so your full IP address is not stored by the analytics tool. The data collected is anonymous and aggregate; it does not include your files, file names, or file contents, which are never sent to Google or any other third party (see section 5). Google may process analytics data in the United States; see section 8 for our transfer safeguards.

You can withdraw consent at any time by clearing the wlp_cookie_consent entry in your browser's localStorage, which stops Google Analytics from loading again until you accept. The cookies involved (_ga and _ga_<STREAM_ID>) are listed in our Cookie Policy at /cookies. Google's own handling of this data is described at https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites.

We use a small number of essential and functional cookies and one localStorage item to run the Service. We also set Google Analytics cookies, but only if you choose "Accept all" in the cookie banner (see section 13). Details and your choices are in our Cookie Policy at /cookies.

The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, contact support@arawapdf.com and we will delete it.

We may update this Privacy Policy. The "Last updated" date at the top will change. For material changes affecting how we use existing personal data, we will provide reasonable notice on the site and (if you have an account) by email before the change takes effect.

For privacy questions or to exercise your rights, contact support@arawapdf.com.