Privacy Policy

1. Introduction

CodeForge Solutions Ltd ("we", "our", or "us"), a company registered in England and Wales (Company Number: 16703742), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our PDF to JSON Platform service.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Collection

2.1 Information You Provide

• Account information (email address, password)
• PDF documents you upload for processing
• Extraction preferences and settings
• Support requests and communications
• Payment information (processed securely by Stripe)

2.2 Automatically Collected Information

• Usage data and analytics
• Device information and browser type
• IP address and approximate location data
• Cookies and similar tracking technologies

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: To provide our service to you and fulfil our contractual obligations
• Legitimate interests: To improve our service, prevent fraud, and ensure security
• Legal obligation: To comply with applicable laws and regulations
• Consent: Where you have given explicit consent for specific processing activities

4. How We Use Your Data

We use your information to:

• Provide and maintain our service
• Process your PDF documents and generate JSON output
• Improve and optimize our service
• Send you service-related notifications
• Respond to your inquiries and support requests
• Process payments and manage subscriptions
• Comply with legal obligations

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest. Your PDF documents and extracted data are stored securely using industry-standard encryption.

Your data is stored on servers located within the European Economic Area (EEA). Where we use third-party service providers who may process data outside the EEA, we ensure appropriate safeguards are in place.

We retain your data only for as long as necessary to provide our service or as required by law. Uploaded documents are automatically deleted after 30 days unless you choose to delete them earlier.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

• Service providers: With trusted third parties who assist in operating our service (e.g., Stripe for payments, Supabase for data storage), under strict confidentiality agreements
• AI processing: Document content may be processed by AI providers (OpenAI, DeepSeek) when you enable AI features; this data is not stored by these providers
• Legal requirements: When required by law or to protect our rights
• Business transfers: In connection with a merger, acquisition, or sale of assets
• Consent: With your explicit consent

7. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request restriction of processing
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us using the information provided below. We will respond to your request within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use cookies to enhance your experience. Essential cookies are required for the service to function. Analytics cookies help us understand how you use our service. You can manage your cookie preferences through our Cookie Settings.

9. Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a complaint, please contact us: