Privacy Policy

1. Introduction

PDFHaul (“Service”) is operated by Bultech (“we”, “us”, “our”). We are committed to protecting your privacy and handling your information with transparency and care.

This Privacy Policy explains how we collect, use, and protect your information when you use our PDF processing tools. By using PDFHaul, you agree to the practices described in this policy.

PDFHaul operates from Canada and follows the Personal Information Protection and Electronic Documents Act (PIPEDA). We also align with GDPR and CCPA/CPRA principles.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Name (optional or provided via Google OAuth)
• Password (hashed and salted)
• Authentication IDs (e.g., Google OAuth ID)
• Account preferences and settings

2.2 File Data

When you upload files to PDFHaul:

• Files are stored temporarily for processing
• Files are automatically deleted within ~2 hours from active systems
• Our cloud provider may retain low-level storage remnants for up to ~24 hours as part of normal infrastructure operation
• We do not manually view or inspect file contents
• We do not store filenames or file contents in logs

2.3 Usage Data

We collect technical information such as:

• IP address (for security and service analytics)
• Browser type, device type, and OS details
• Pages visited and features used
• Processing metadata (operation type, size, duration)
• Error logs and diagnostic information

2.4 System Logs

We maintain logs for operational and security purposes:

• Authentication logs
• Security event logs (failed logins, rate-limit triggers)
• Operational logs (processing history without file contents)
• Error logs

Log Retention:

• Operational logs: 30 days
• Security logs: 90 days
• Error logs: 30 days
• Logs do not contain file contents or filenames

2.5 Cookies

We use cookies to maintain sessions, remember preferences, and ensure secure operation. Disabling essential cookies may limit functionality.

3. How We Use Your Information

• Provide and maintain the Service
• Authenticate and secure user accounts
• Process your files and deliver results
• Prevent fraud, abuse, and security incidents
• Improve performance and develop new features
• Send service-related notifications
• Comply with legal requirements

4. Data Sharing

We do not sell or rent your personal information. We may share data with:

• Cloud provider (hosting, processing, storage)
• Email delivery providers
• Payment processors (we never store card data)
• Analytics providers (aggregated and pseudonymized usage data)
• Authorities if required by law

5. Data Security

We implement industry-standard security measures including:

• TLS encryption in transit
• Encrypted storage at rest (cloud provider)
• Password hashing with salts
• Isolated, sandboxed processing environments
• Strict access control for administrative systems
• Automated file deletion within ~2 hours

6. Data Retention

• Uploaded files: deleted within ~2 hours
• Cloud provider residual storage: up to ~24 hours (not accessible to us)
• Account data: retained until deletion request
• Logs: 30–90 days depending on type

7. Your Rights

You may request to:

• Access your personal data
• Correct or update information
• Delete your account and associated data
• Download your data (portable format)
• Withdraw consent for non-essential data

To exercise these rights, contact: [email protected]

8. Changes to This Policy

We may update this Privacy Policy periodically. If changes are significant, we will notify you via email or a notice on our website. Your continued use of the Service indicates acceptance of updated terms.

9. Contact Us

For privacy-related questions: