Privacy Policy
Effective date:
This Privacy Policy explains how ProjectTeamForYou (프로젝트팀포유), represented by Lee Yusang (“we”, “us”) handles personal information in connection with the AllofPDF desktop application for Windows (the “App”) and the website on which this policy is published (the “Website”). Our approach is simple: your documents stay on your computer. We collect as little as possible, and we never sell personal information.
1. Who we are and how to contact us
The controller responsible for the processing described in this policy is ProjectTeamForYou. For any privacy question or request, including exercising your rights, contact us at projectteamforyou@gmail.com. This address also serves as the contact of our privacy officer (the person responsible for personal information protection under the Korean Personal Information Protection Act).
Business information
| Company | ProjectTeamForYou (프로젝트팀포유) |
| Representative | Lee Yusang (이유상) |
| Business registration no. | 495-25-02209 |
| Mail-order sales registration no. | No. 2026-Gyeongbuk Bonghwa-0037 |
| Address | 1166-68 Yebong-ro, Sangun-myeon, Bonghwa-gun, Gyeongsangbuk-do, Republic of Korea |
| Phone | +82-70-7620-7256 |
| projectteamforyou@gmail.com |
2. Summary
- The App opens, edits, searches, OCRs, redacts and compares documents locally on your device. Your documents are never uploaded to us.
- The App requires no account, no login and no email address.
- Cloud AI is off by default. Only if you explicitly turn it on and send a request is the text you selected transmitted to our AI provider, Anthropic, PBC.
- Crash reports are opt-in. Nothing is sent unless you agree.
- The Website uses no cookies and no advertising or cross-site trackers. To count downloads we store a one-way hashed IP address with a daily-rotating salt — never your raw IP address.
3. The desktop App
3.1 Your documents
All document processing — rendering, editing, text search, OCR, redaction, comparison, Document X-Ray and local AI — happens on your device. We do not receive, store or have access to your files, their contents or their file names. Recent-file lists, settings and local indexes are stored only on your device and are deleted when you remove them or uninstall the App.
3.2 Local AI
Local AI features run on your device. Prompts, documents and answers processed by local AI are not transmitted to us or to anyone else.
3.3 Cloud AI (optional, opt-in)
Cloud AI is disabled until you explicitly enable it and consent in the App. When you use it:
- What is sent: only the text you selected or the passages the App retrieves from the document you are asking about, together with your question, is sent over an encrypted connection to Anthropic, PBC, which provides the AI model. Whole files are not uploaded unless you expressly choose to send them.
- Purpose: solely to generate the answer or perform the command you requested.
- Provider terms: Anthropic processes this data under its commercial terms and privacy policy. Under those terms as of the effective date, data sent through its API is not used to train its models by default and is retained only for a limited period (for example, for abuse and safety monitoring).
- Our side: if the request passes through our relay to reach the provider, we do not store the prompt or the response; we keep only minimal technical logs (timestamp, request size, error codes) for up to 30 days for security and abuse prevention.
- Withdrawal: you can turn Cloud AI off at any time in Settings. This stops all further transmissions.
3.4 Update checks
To offer security and feature updates, the App may periodically request release information from our servers. This request contains the App version, Windows version and processor architecture. Your IP address is necessarily visible to our hosting provider when the connection is made; we do not use it to identify you and do not store it in raw form. Update packages are code-signed and verified before installation. The App may download an update in the background, but installs it only after you confirm. In Private Mode the App makes no network connections at all, including update checks.
3.5 Crash reports (opt-in)
If you agree to send crash reports, a report may include the App version, Windows version, device architecture, a stack trace and a random installation identifier. Reports are designed to exclude document contents, and file names and paths are removed before sending. Crash reports are kept for up to 90 days and are used only to fix bugs. You can withdraw consent at any time in Settings.
3.6 No telemetry or advertising in the App
The App contains no advertising, no advertising identifiers and no usage analytics.
4. The Website
4.1 No cookies, no trackers
The Website does not set cookies and does not use advertising pixels, fingerprinting or cross-site tracking. Your preferred color theme is stored only in your browser’s local storage and is never sent to us.
4.2 Download statistics
When you click a download button, our download service records one download event so that we can count downloads. It stores:
- the platform (for example, Windows x64), the Website language and the App version downloaded;
- the country, as derived by our hosting provider from the connection (country level only);
- the referring page (origin and path only; query strings are discarded);
- a SHA-256 hash of your browser’s user-agent string; and
- a SHA-256 hash of your IP address combined with a secret salt and the current date. Because the salt rotates every day, the hash cannot be linked across days and cannot be reversed to reveal your IP address. Your raw IP address is never stored.
We use this information only to produce aggregate statistics (for example, total and unique daily downloads by country or language) and to detect abuse. Because hashed values may still be considered pseudonymous personal data in some jurisdictions, we treat them as personal data. Individual event records are deleted or irreversibly aggregated after 13 months.
4.3 Public counters and release information
The Website fetches the total download count and the latest release details (version, size, SHA-256) from our API. These requests do not contain personal information beyond what your browser necessarily transmits to connect.
4.4 Advertising on the Website (if enabled)
The Website may in the future display clearly labelled advertising in designated areas. If it does, ads are served from our own API, without cookies and without third-party ad networks that track you. We count impressions and clicks only in aggregate. Ads never appear inside the App.
4.5 Hosting, security logs and optional analytics
The Website and download service are hosted by Cloudflare, Inc. Cloudflare processes connection data (including IP addresses) transiently to deliver content and protect against attacks. If we enable Cloudflare Web Analytics, it operates without cookies and without collecting IP addresses for tracking, and provides us only with aggregate page-view statistics.
4.6 Contacting us by email
If you email us, we process your email address and message to respond. We keep this correspondence for up to 3 years after the matter is closed, unless a longer period is required by law.
5. Legal bases (GDPR)
Where the EU/EEA or UK GDPR applies, we rely on: consent (Art. 6(1)(a)) for Cloud AI and crash reports; legitimate interests (Art. 6(1)(f)) for aggregated download statistics, security and abuse prevention, update checks and responding to enquiries — our interests are understanding how many people use AllofPDF and keeping our services secure, and we have minimised the data so that these interests are not overridden by yours; and legal obligation (Art. 6(1)(c)) where we must retain or disclose information by law.
6. Recipients and processors
We do not sell or rent personal information and we do not share it for cross-context behavioural advertising. We share data only with service providers that process it on our behalf and under contract:
| Recipient | Purpose | Data |
|---|---|---|
| Cloudflare, Inc. (USA) | Website hosting, CDN, download storage (R2), API hosting, security | Connection data, hashed download events |
| Anthropic, PBC (USA) | Cloud AI answers — only when you enable and use Cloud AI | Selected text and your question |
| Crash-reporting service we operate or engage | Crash diagnostics — only if you opt in | Crash reports described in §3.5 |
We may disclose information if required by law, court order or a competent authority, or to protect the rights, safety and security of users or the public.
7. International transfers
Our service providers may process data in the United States and other countries. Where required, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses or equivalent mechanisms, and, for users in Korea, in accordance with the Personal Information Protection Act (country of transfer, recipient, purpose, items and retention are listed in §6 and §8).
8. Retention and destruction
| Data | Retention |
|---|---|
| Hashed download events | Up to 13 months, then deleted or irreversibly aggregated |
| Aggregate statistics (no personal data) | Indefinitely |
| Cloud AI relay technical logs | Up to 30 days |
| Crash reports | Up to 90 days |
| Email correspondence | Up to 3 years after the matter is closed |
When the retention period ends or the purpose is achieved, electronic records are deleted using methods that prevent recovery. Data stored only on your device remains under your control and is removed when you delete it or uninstall the App.
9. Your rights
Depending on where you live, you have the right to request access to, correction or deletion of your personal information, to restrict or object to processing, to data portability, and to withdraw consent at any time (without affecting prior processing). Because we do not ask for your name or account, we may need you to provide information (for example, the approximate time of a download) to locate records; we will not ask for more than necessary.
- EU/EEA/UK (GDPR): you may also lodge a complaint with your local data protection authority.
- Republic of Korea (PIPA): you may request access, correction, deletion or suspension of processing, and you may seek help from the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972), the Personal Information Infringement Report Center operated by KISA (privacy.kisa.or.kr, 118), the Supreme Prosecutors’ Office (www.spo.go.kr, 1301) or the National Police Agency (ecrm.police.go.kr, 182).
- California (CCPA/CPRA): you have the right to know, delete and correct personal information and to not be discriminated against for exercising your rights. We do not sell or share personal information and do not use sensitive personal information for purposes that would require a right to limit. In the preceding 12 months we collected identifiers only in hashed form (download events) and internet activity limited to the referring page, for the business purposes described above.
To exercise any right, email projectteamforyou@gmail.com. We respond within the period required by applicable law (generally within 30 days, or within 10 days for requests under Korean law where required). You may use an authorised agent where the law permits.
10. Security
We use encryption in transit (HTTPS/TLS), least-privilege access to production systems, secret keys stored in managed secret stores, and data minimisation such as hashing IP addresses before storage. Installers are code-signed so that you can verify their origin. No method of transmission or storage is completely secure, but we work to protect the information we hold.
11. Children
AllofPDF is a general-purpose productivity tool and is not directed to children. We do not knowingly collect personal information from children under 14 (or under the age required by your local law). If you believe a child has provided us personal information, contact us and we will delete it.
12. Changes to this policy
We may update this policy to reflect changes in our services or the law. We will post the updated version on this page with a new effective date and, for material changes, provide a prominent notice on the Website or in the App before the changes take effect.
13. Contact
AllofPDF project team — Privacy Officer Email: projectteamforyou@gmail.com