Privacy-First Processing: Page editing, styling, and EPUB packaging run locally on your computer. Managed OCR uploads selected PDF pages to private Cloudflare R2 storage with a seven-day expiration rule. Pro is not yet available; it is planned to send selected PDF pages directly to Mistral without sending the PDF, your Mistral API key, or OCR results to ReflowablePDF.
1. Overview & Service Architecture
ReflowablePDF provides desktop conversion software and cloud AI OCR services designed to convert complex PDF documents—including academic papers, scanned books, multi-column layouts, and mathematical formulas—into reflowable EPUB files. We are committed to protecting your personal information and handling source documents responsibly.
2. PDF Processing & Cloud Storage
- Managed OCR Cloud Storage: When using Managed Credits, selected PDF pages or page images are encrypted in transit via TLS and stored temporarily in our Cloudflare R2 storage solely to perform OCR text and layout extraction.
- Seven-Day Expiration: Uploaded source PDFs may be retained for quality diagnostics. A Cloudflare R2 lifecycle rule expires them after seven days; physical removal occurs when the storage service processes that rule.
- Pro Mode Privacy (not yet available): The planned Pro mode sends the PDF directly to Mistral. ReflowablePDF does not receive the PDF, OCR results, or your API key. The key is encrypted on your device and is never transmitted to or stored on ReflowablePDF servers.
3. Device Identification & Accounts
ReflowablePDF operates on an accountless model. We do not require you to create an account, register an email address, or maintain a password.
- Anonymous Device ID: A randomly generated Device Identifier (UUID) is created and stored on your computer to manage your credit balance and verify service entitlements.
- Credit Ledger Records: We maintain immutable transaction ledger entries (linked to your Device ID) to verify purchased credit units, credit usage, refunds, and device balance migrations.
- Abuse Prevention: Free-preview grants retain a salted digest of the request's network address in the ledger to limit repeated grants. This digest does not contain the raw address.
4. Payment Processing (Merchant of Record)
Payments for ReflowablePDF credits and licenses are processed securely by Creem, who acts as the Merchant of Record.
- Payment Information: Creem collects and processes payment card details, billing address, and tax information in accordance with Creem’s Privacy Policy. ReflowablePDF does not collect, store, or process raw credit card numbers.
- Support Email Retention: ReflowablePDF receives and retains transaction metadata (Creem Order/Checkout ID, purchased credit units, transaction timestamp) and optional customer support email addresses solely for credit delivery verification, customer support, and manual balance recovery.
5. Website Analytics & Diagnostics
Website analytics are optional and disabled unless an analytics ID is configured. When enabled, Google Analytics can receive page visits, referral sources, and browser/device information. Payment return pages are excluded from our page-view tracking. Website analytics do not access your local PDF or EPUB files.
6. Third-Party Service Providers
We utilize third-party providers strictly necessary for operating our hosted service:
- Creem: Merchant of Record for payment billing, invoicing, and compliance.
- Cloudflare: Cloud infrastructure, API routing, and temporary object storage (R2).
- Mistral AI: Third-party AI provider used for OCR text and layout extraction.
- Resend: If you submit feedback through our contact API, it forwards only your message to support. Hourly abuse-prevention records store a salted network digest, not the message body.
7. Data Retention & User Rights
Local conversion project files, downloaded EPUBs, and settings remain under your full control on your computer. Accountless credit ledgers and payment transaction records are retained to maintain valid device balances and comply with financial auditing obligations. You may request support regarding your transaction history or device credit recovery at any time.
8. Contact Us
If you have questions about this Privacy Policy or data privacy practices, please contact us at:
Email: [email protected]