WindPDF is a product of DRIME SAS. The English version is currently the primary authoritative text. When a French version is published, the French version will become authoritative.
1. Introduction
WindPDF ("we", "us", "our") is committed to protecting your privacy and personal data. WindPDF is a product published and operated by DRIME SAS, simplified joint-stock company (Société par actions simplifiée), SIRET 999 702 954 00010, with registered office at 6 chemin du Georgillet, 74500 Évian-les-Bains, France.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our web-based PDF editor and related tools accessible at windpdf.com (the "Service").
This Privacy Policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the French Data Protection Act (Loi Informatique et Libertés), and other applicable European data protection laws.
By using the Service, you consent to the collection and use of information in accordance with this Privacy Policy.
2. Data Controller
The data controller for personal data processed through the Service is:
DRIME SAS (publisher and operator of WindPDF)
simplified joint-stock company (Société par actions simplifiée)
SIRET: 999 702 954 00010
Intra-community VAT number: FR18999702954
Registered office: 6 chemin du Georgillet, 74500 Évian-les-Bains, France
Publication director: Jarre Tibalt
- Email: contact@drime.cloud
- Phone: +33 6 16 18 71 66
- Website: https://drime.cloud
- WindPDF website: https://windpdf.com
For questions or requests regarding your personal data, contact us at contact@drime.cloud.
3. Information We Collect
3.1 Information you provide
Account information (if you create an account): email address, name (optional), password (stored as an encrypted hash), language preference, avatar (optional), and security settings (for example two-factor authentication).
Documents and workspace data: files you choose to upload or save to your WindPDF cloud drive; document names and folder structures; settings related to editing, conversion, signing, or sharing; and prompts or instructions you submit to AI features.
Billing information: payment-related details are processed by Stripe. We receive limited billing metadata (for example subscription status, plan, and transaction identifiers), not your full card number.
Communications: support requests, feedback, and other messages you send us.
3.2 Information automatically collected
- IP address, browser type and version, device and operating system information, user agent, referrer URL, and access times
- Pages visited, features used, session information, and usage patterns needed to operate and secure the Service
- File metadata such as names, sizes, types (MIME), and technical properties when files are processed or stored
3.3 Browser-local processing
When a tool runs entirely in your browser, the document content typically remains on your device and is not sent to our servers unless you use a server-side feature, AI feature that requires remote processing, or explicitly save to the cloud.
3.4 Information from third parties
If you authenticate through a third-party provider, we may receive a user identifier and related authentication data. Payment status and events may be received from Stripe. Email delivery status may be received from our email provider.
4. How We Use Your Information
We use the information we collect to:
- Provide and improve the Service — operate PDF tools, accounts, cloud storage, AI features, subscriptions, and customer support
- Security and abuse prevention — detect fraud, abuse, and threats; enforce our Terms of Use; maintain integrity of the Service
- Legal compliance — comply with applicable laws and respond to lawful requests
- Communication — send service-related notifications, billing notices, and respond to inquiries; marketing messages only where permitted and with a way to opt out
5. Legal Basis for Processing (GDPR)
- Contractual necessity — to provide the Service you request (Article 6(1)(b) GDPR)
- Legitimate interests — security, abuse prevention, and service improvement (Article 6(1)(f) GDPR)
- Legal obligation — to comply with applicable laws (Article 6(1)(c) GDPR)
- Consent — for optional cookies/features where required (Article 6(1)(a) GDPR), which you may withdraw at any time
6. Data Storage and Location
6.1 Storage location
- Application hosting: servers operated by DRIME on Hetzner infrastructure in the European Union
- Cloud file storage: Cloudflare R2 in Europe
- Database: stored in Europe (priority to EU regions)
- Payments: Stripe (as payment processor)
6.2 Data retention
- Account data: retained while your account is active; deleted within 30 days of a completed account deletion request, unless longer retention is required by law
- Cloud documents: retained until you delete them or your account is deleted, subject to backup cycles
- Logs and security records: typically retained for up to 90 days (security logs up to 1 year where needed)
- Billing records: retained as required for accounting and tax obligations
7. Data Sharing and Disclosure
We do not sell your personal data to third parties.
We may share information with trusted service providers who assist us in operating the Service, including:
- Hetzner — infrastructure hosting in the EU
- Cloudflare R2 — European file storage
- Stripe — payment processing
- Email and transactional messaging providers
- AI subprocessors, when you use AI features that require remote processing
These providers are expected to process data only as instructed, implement appropriate security measures, and comply with applicable data protection laws.
We may also disclose data in connection with a business transfer, with your consent, or when required by law.
8. Your Rights (GDPR)
Under the GDPR and applicable laws, you may have the rights of access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent, and the right to lodge a complaint with a supervisory authority.
To exercise these rights, contact contact@drime.cloud with "GDPR Request" in the subject line. We will respond within 30 days (or as required by applicable law).
In France, the supervisory authority is the CNIL (https://www.cnil.fr).
9. Cookies and Tracking Technologies
We use cookies and similar technologies as described in our Cookie Policy. Essential cookies are required for authentication, security, and core functionality. Optional cookies (if any) are used only with your consent where required by law.
We do not use advertising cookies or social media tracking pixels for cross-site advertising as part of the core WindPDF product experience.
10. Security Measures
We implement technical and organizational measures appropriate to the risk, including HTTPS/TLS, access controls, password hashing, secure session cookies, and encrypted storage for cloud files. No method of transmission or storage is completely secure; we work to protect your data and will notify authorities and affected users of personal data breaches as required by law.
11. Children's Privacy
The Service is not intended for children under 13 years of age (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
12. International Data Transfers
We prioritize storing and processing data within the European Economic Area (EEA). If data is transferred outside the EEA (for example through a subprocessor), we ensure appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated policy on our website, update the "Last updated" date, and notify registered users of material changes when required (typically at least 30 days in advance).
Language. The English version is currently the primary and authoritative version. When a French version is published, the French version will become authoritative.
14. Contact Information
For questions, concerns, or requests regarding this Privacy Policy or your personal data:
DRIME SAS (publisher and operator of WindPDF)
simplified joint-stock company (Société par actions simplifiée)
SIRET: 999 702 954 00010
Intra-community VAT number: FR18999702954
Registered office: 6 chemin du Georgillet, 74500 Évian-les-Bains, France
Publication director: Jarre Tibalt
- Email: contact@drime.cloud
- Phone: +33 6 16 18 71 66
- Website: https://drime.cloud
- WindPDF website: https://windpdf.com
Related DRIME policies:
By using WindPDF, you acknowledge that you have read and understood this Privacy Policy.