Company Name: BigLofty
Service: PDF Tool Editor—for work (https://biglofty.com)
Effective Date: January 1, 2025
BigLofty (we, our, us) respects your privacy and is committed to protecting it. This Privacy Policy explains how we collect, use, and safeguard your information when you use our PDF Tool Editor on the web or mobile applications (the Services).
BigLofty respects your right to privacy when you use our services, visit our website, download our desktop app or mobile app, or communicate with us. We take all necessary measures to ensure that any personal data you provide to us is treated in accordance with applicable data protection laws and this Privacy Notice.
‘Personal data’ is information that relates to an identified or identifiable individual, such as your name or email address. In exchange for our services, we may process personal data relating to you (‘your personal data’) when you visit our website or communicate with us. In these cases, BigLofty is the controller of your personal data.
When you upload or otherwise provide files and information that may contain personal data relating to you or others, and process such files and information using our Services (‘User Files’) you remain solely responsible for such personal data contained in the User Files.
In the paragraphs below, we try to provide you with information about our processing of your personal data, your rights with respect to your personal data, and the measures we take to maintain the confidentiality and security of your personal data.
We collect the following types of information to provide and improve our Service:
Email address (only when you register, subscribe, or contact us).
Name (optional for personalization).
Device details (device type, operating system, browser type).
Usage statistics (pages visited, actions taken).
PDF files and documents uploaded to our Service are processed temporarily.
Files are not stored permanently and are automatically deleted after processing unless you choose to save them.
Files are processed using secure, encrypted connections (HTTPS).
Files are automatically deleted from our servers within 24 hours after processing.
We do not share, sell, or permanently store your files.
To operate and provide the features of the PDF Tool Editor.
To improve user experience and develop new features.
To provide customer support and respond to inquiries.
To comply with legal obligations.
If you provide us with personal data about other people (such as family members or work colleagues) or provide us with user files that contain personal data relating to other people, please ensure that they are aware of this privacy notice and only provide us with their data if you are permitted to do so and that such personal data is accurate.
Our website, desktop apps, mobile apps and communications channels may contain links to other websites. If you follow a link to any of these websites, please note that personal information you submit will be processed in accordance with their own privacy notices, and Smallpdf accepts no responsibility or liability for those websites. Please be sure to check those privacy notices before submitting any personal information to those websites.
This Privacy Notice has been prepared in accordance with applicable privacy laws. Depending on your location, this may be the Swiss Federal Data Protection Act (‘CCPA’) the Indian Consumer Privacy Act, or the European Union General Data Protection Regulation (‘GDPR’) as amended.
The data controller for your personal data is:
BigLofty
Email: support@biglofty.com
Website: www.biglofty.com
We collect and process the following data:
Personal Information: Email address, name (optional).
Usage Data: Device info, browser type, app interactions.
Files: Uploaded PDFs for processing (temporarily).
We process your personal data on the following legal bases:
Performance of a Contract: To provide our PDF editing services.
Consent: For marketing emails (only when you opt-in).
Legitimate Interest: To improve our services and ensure security.
Provide PDF editing and processing services.
Improve user experience.
Respond to inquiries and support requests.
If we transfer data outside the IND, we use safeguards such as:
Under GDPR, you have the right to:
Access your data: Request a copy of your personal data.
Rectify your data: Correct inaccurate information.
Erase your data: Request deletion of your data (Right to be Forgotten).
Restrict processing: Limit how we process your data.
Data portability: Request transfer of your data.
Withdraw consent: At any time for activities based on consent.
To exercise your rights, email us at support@biglofty.com.
In Short: If you use our Services, whether you are a free or paid user, we will collect personal data about you as needed to provide our Services to you and/or to help us improve our Services for you.
If you visit a domain or subdomain of Biglofty.com and do not register or log in to your account, we collect and process your personal data that is necessary to enable your informational use of these domains. We also use functional cookies and other technologies (see Section 8) to enable this functional use of our website and to maintain its stability and security. For these purposes, we process your IP address and other usage metrics as well as the date and time of your access. We process your personal data to provide you with our website (Art. 6 GDPR) and on the basis of our legitimate interest in maintaining the stability and security of our website (Art. 6 GDPR).
You can access our Services and upload user files via third-party services such as Dropbox and Google Drive. For this, you do not need to create a user account with us or provide your login credentials for the third-party service or application. Instead, we will let you access our Services with an authorization token (also called an “OAuth token”) from the third-party service provider, which confirms that you are a legitimate user of their service. We process this information so that you can use our Services (Article 6 GDPR).
If you create a BigLofty account via our website, mobile app or desktop app (including a free trial of our services), we process your email address and the password you chose at the time of registration.
You can also create a user account for our Services using your pre-existing Google, Apple, or Facebook accounts and log in to your user account with us using that third-party platform’s credentials. If you choose this option, you allow us to request and use certain of your personal data from the third-party account.
For Google, this includes us processing your first name, last name, email address and public profile information (such as profile picture). For Facebook, we will process your email address and public profile information (username and profile picture). For Apple, this includes us processing your user name and email address. The third-party platform may ask for your consent to share this data with us. Since the personal data we may process under this option was originally collected by the third-party platform, the initial data processing and the sharing of data with us is governed by the privacy policy of such third-party platform (i.e., Google, Apple or Facebook). If you wish to deactivate the connection between the third-party platform and us, please refer to the relevant third-party platform and/or its settings.
We process your personal data to set up your user account and, thus, create a contractual relationship (Article 6 GDPR).
For security reasons, we also process the time of your last login, browser, IP address and the time of your last password reset. It is our legitimate interest to process this information to filter suspicious login requests and to detect and prevent the misuse of your user credentials (Article 6 GDPR).
During the registration of your user account or later, if you purchase any of our paid subscriptions (BigLofty Pro), you may provide your personal data as part of your profile. This type of personal data varies depending on the type of account (single or team), the type of subscription and the payment method you choose. This type of data may typically include your name, address, which subscription plan you are using, your payment method (such as Braintree or credit card, in the latter case the expiry date and some digits of your credit card number), your VAT or other tax number, user settings, your company, role and employee status.
We process your personal data to recommend the right type of subscription for your needs and to complete your purchase. The data processing takes place to conclude and fulfil the subscription contract between you and us (Article 6 GDPR).
We use payment data and information from your subscription and payment history (subscription plan, billing period, etc.) to process the regular payments of your BigLofty Pro subscription and, thus, fulfill our contract (Article 6 GDPR). We do this through third-party payment processors, such as Paypal (if you choose Braintree as a payment method), Braintree (if you choose a credit card as a payment method), Adyen (if you choose a credit card as a payment method), GoCardless (if you choose a direct debit payment as a payment method) as well as Google Pay, Paytm, PhonePay, UPI, Apple Pay and Stripe. We also use Recurly as a subscription management provider. For more information on these providers, please see Section 4 below.
If you choose a credit card as a payment method, your full credit card number is always sent directly to the payment provider and never reaches our servers. We receive only the first and last four digits of any credit card.
We process your account, subscription and payment information to fulfill our legal obligations (e.g., legal data storage obligations under tax law) (Article 6 GDPR) and provide you with invoices under our contract (Article 6 GDPR). We also use Recurly as a subscription management provider to help us provide the above services. For more information about this provider, please see Section 4 below.
When you contact us via email, including for customer support, you provide us with your email address and may also provide other personal information, including your name, contact details and the content of the email. We process this information to respond to your request (Article 6 GDPR).
We may send you our newsletter or other marketing emails, usually only with your consent (Article 6 of the GDPR). However, where you have already purchased products and/or services from us, we may inform you about our similar products or services via email, where we have already informed you of such possibility and allowed you to decline it. We obtain consent to do so in accordance with Article 6 of the GDPR and sometimes with the consent of the applicant in accordance with Article 6 of the GDPR. Please note that you can opt-out of such email communications by clicking on the unsubscribe link provided at the end of each marketing email.
Google Ads
a) Audience building
We use Google Click IDs (GCLID) (provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, USA) to create custom audiences for targeted advertising, offline conversion tracking and audience expansion in Google Ads. This includes both new and existing email addresses in our database. To withdraw your consent, visit Cookie Settings at the bottom of our website.
Google may process data collected via GCLID for its own advertising purposes in accordance with its Privacy Policy. We do not control Google’s processing activities. You can review Google’s policies and opt-out of personalized advertising via the Google Ad Settings page.
A cookie is a small piece of data placed on your computer’s hard drive that allows a specific device or browser to be identified. We may place our own cookies (first-party cookies) or third-party services integrated on our website may place cookies on your device (third-party cookies). Cookies may typically process personal data, such as your IP address, device information, the date and time of your visit to our website, information about your activities on our website, settings you make while visiting our website and unique identification numbers. There are different types of cookies, such as session cookies (which expire at the end of your browsing session) or persistent cookies (which are stored on your device longer and between sessions and may enable the entity placing the cookie to recognise your device or browser between sessions).
We use cookies for a variety of purposes:
We use cookies or other similar technologies that are technically necessary to operate our website or to perform its basic functions, such as our payments or to keep you logged in (if you wish). These cookies enable us to operate our site, maintain its security and provide its core functions. We process your personal data to provide our website to you (Article 6 GDPR) and on the basis of our legitimate interest in ensuring its security, a seamless user experience and easy access to these core functions (Article 6 GDPR).
We implement SSL encryption and industry-standard security to protect your data.
You have the right to lodge a complaint with your local Data Protection Authority if you believe your GDPR rights are violated.
BigLofty
Email: support@biglofty.com
Website: www.biglofty.com
