Privacy Policy

Last updated 2026-09-15

1. Who we are

This policy explains what personal information Loopdraw (“we”, “us”) collects when you use loopdraw.app, the PDF editor and the tools on it, what we do with it, and the choices and rights you have. It applies whether or not you have an account.

Questions, requests and complaints about privacy: hello@loopdraw.app.

2. The short version

  • Most tools work entirely in your browser. Those files never reach us.
  • The editor sends us a copy of a PDF only so its text can be read, and that copy is deleted within 24 hours. Office conversions are deleted as soon as the converted file has been sent back.
  • We do not sell your personal information, show you ads, share it for advertising, or use your documents to train AI.
  • We use one cookie, which keeps you signed in. We use no advertising or third-party analytics cookies.
  • You can ask us for a copy of your information, or to delete it, at any time.

3. Your documents

Merging, splitting, compressing, repairing, page numbers, image conversions, reading scans (OCR), passwords, watermarks and redaction all run on your own device. The file is opened, changed and saved in your browser and is not sent to us. To read a scan, your browser downloads the OCR engine and its language data from the jsDelivr content network; your document is not sent with that request.

When you open a PDF in the editor (including Edit PDF, Sign PDF and Fill PDF form), your browser sends a copy of the file to our server so the text and its layout can be read out. We store that copy and the extracted text only to answer the editor, and delete both automatically within 24 hours.

The office conversions — Word, PowerPoint, Excel and HTML to PDF, PDF to Word and PDF/A — send the file to our conversion service. It is converted in a temporary folder that is deleted as soon as the result has been sent back.

Your editor projects, saved signatures, uploaded images and brand logos are kept in your own browser’s storage, filed under the account you were signed in with. They are not on our servers. Clearing your browser’s site data deletes them.

We do not look at the contents of your documents, and we never use them for advertising or to train AI models.

4. Information we collect

Depending on how you use Loopdraw, we collect:

  • Account details: your email address, your name if you give it, a securely hashed version of your password (never the password itself), and email verification codes, which are stored hashed and expire.
  • Sign in with Google: if you choose it, Google tells us your email address, name, Google account ID and profile picture link.
  • Plan and payment records: your plan, when it started and ends, and a record of each purchase (plan, amount, currency, dates and the payment reference). Payments are taken by Kelviq; we never see or store your card details.
  • Free allowance records: to count the free documents and free tries each account gets, we keep a fingerprint (a SHA-256 hash) of each document used in the editor, the name and date of the most recent one, and how many times each Plus conversion has been used. A fingerprint cannot be turned back into the document.
  • Sign-in records: the time and method (email or Google) of each sign-in, to keep accounts secure.
  • Technical information: your IP address is used to protect sign-in, sign-up and other forms from abuse (it is held in memory for a short time for that purpose) and appears in our server logs along with the address requested and the time.
  • Visit counts: a random ID created by your browser, the day, and how many pages were viewed. We do not store your IP address, the pages, where you came from or your device with it. If your browser sends a Global Privacy Control or Do Not Track signal, we do not count the visit at all.
  • Teams: if you create or join a team, the team’s name, its members and their roles, the email addresses invitations are sent to (with a hashed invitation link that expires after 7 days), the team’s brand kit (logos, colours and fonts uploaded to it), and a count of each member’s exported documents and finished conversions, with the tool used and the time. Everyone in a team can see its members and brand kit; the team’s owner and admins can also see each member’s usage counts.
  • Feedback: if you answer our feedback prompt, your rating, any message you write, which tool you had just used, and your account if you are signed in.
  • Support and legal messages: anything you send us by email.
  • Account changes made by our staff: if we change your plan or account (for example, to fix a problem), we record what was changed, by whom and why.

5. Cookies and storage on your device

We keep this to what the service needs:

  • loopdraw_session (cookie): keeps you signed in for up to 30 days. It cannot be read by scripts on the page and is removed when you log out. It is strictly necessary for accounts to work.
  • loopdraw_visitor (local storage): the random visit-counting ID described above.
  • loopdraw.feedback (local storage): remembers whether we have already asked for your feedback. It is not sent to us.
  • loopdraw:resume (session storage): reopens the document you were editing if you reload the page. It is cleared when you close the tab and is not sent to us.
  • pdf-studio (IndexedDB database): your projects, signatures and images, kept on your device only.

If you sign in with Google, Google’s sign-in script is loaded on the sign-in screen and may set Google’s own cookies, under Google’s privacy policy. Our fonts are served from our own site. You can clear or block site storage in your browser settings; the tools will still work, but you will need to sign in again.

6. How we use information

  • to provide the tools, the editor, your account and your plan;
  • to count and enforce free documents, free tries and paid plans;
  • to run teams: seats, invitations, roles, the shared brand kit and the usage overview;
  • to process payments through Kelviq and keep accurate financial records;
  • to send emails you need, such as verification codes;
  • to keep the service secure and prevent fraud, abuse and misuse;
  • to understand overall usage (such as how many people visit) and improve Loopdraw;
  • to answer your requests and feedback; and
  • to comply with the law and enforce our Terms of Use.

We tell our own team when someone signs up, buys a plan or leaves feedback, which includes the account’s email address. We do not sell personal information, “share” it for cross-context behavioural advertising, or use it to make decisions about you that have legal or similarly significant effects.

7. Legal bases (UK and EEA)

Where UK or EU data protection law applies, we rely on: performing our contract with you (providing the service, your account and plan); our legitimate interests (keeping the service secure, preventing abuse, counting visits and improving Loopdraw, in ways that do not override your rights); legal obligations (such as keeping financial records); and your consent where we ask for it, which you can withdraw at any time.

8. Who we share information with

Only with the service providers who help us run Loopdraw, and only what they need:

  • hosting and database providers, who store our systems and data on our behalf;
  • Kelviq, our payment provider and merchant of record, which handles checkout, receipts, refunds and taxes (it uses Stripe to process cards);
  • Resend, which delivers our emails;
  • Google, if you choose to sign in with Google;
  • jsDelivr, from which your browser downloads the OCR engine when you read a scan;
  • professional advisers, such as lawyers and accountants, where needed;
  • authorities, where the law requires it or to protect the rights and safety of people or Loopdraw; and
  • a buyer or successor, if Loopdraw is sold or merged, who must keep treating your information as this policy describes.

9. International transfers

We and our providers may store and process information in the United States and other countries, which may have different data protection laws from where you live. Where the law requires it, we rely on recognised safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.

10. How long we keep information

  • Documents sent to the editor, and their extracted text: deleted automatically within 24 hours.
  • Office conversion files: deleted as soon as the result has been returned.
  • Account, plan, free allowance and sign-in records: for as long as your account exists. If you ask us to delete your account, we delete them within 30 days, except what we must keep by law.
  • Purchase records: for as long as tax and accounting laws require, which can be up to seven years.
  • Team information: for as long as the team exists. A member’s place in a team ends when they leave or are removed; unused invitations stop working after 7 days. Usage counts are kept to show the team its monthly overview.
  • Server logs: kept for a limited period for security and troubleshooting, then deleted on a rolling basis.
  • Visit counts and feedback: kept as long as they are useful to improve Loopdraw; visit counts are only ever reviewed in total.

11. Security

We use encrypted HTTPS connections, store passwords only as salted hashes, keep the sign-in cookie out of reach of page scripts, limit repeated attempts at sign-in and sign-up, and restrict access to personal information to the people who need it. No online service can be perfectly secure, so we cannot guarantee absolute security; if a breach affects your personal information, we will tell you and the authorities as the law requires.

12. Your rights and choices

Wherever you live, you can ask us for a copy of your personal information, ask us to correct it, or ask us to delete your account and information. Email hello@loopdraw.app from your account’s email address so we can confirm the request is yours. We answer within one month (UK and EEA), 30 days (Canada) or 45 days (US states), and may extend that where the law allows.

  • UK and EEA: you also have the right to restrict or object to processing, to data portability, and to complain to a data protection authority — in the UK, the Information Commissioner’s Office (ico.org.uk).
  • Canada: you can access and correct your information and withdraw consent (which may affect what we can provide), and complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
  • United States: depending on your state (including California, Colorado, Connecticut, Virginia and others), you have the right to know, access, correct and delete your personal information, and to opt out of its sale, sharing for targeted advertising, and profiling. We do none of those. We will not treat you differently for using your rights, and you may use an authorised agent. We honour Global Privacy Control signals.

13. Children

Loopdraw is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy as Loopdraw changes. The date at the top shows when it last changed, and for a significant change we will give notice on the site or by email before it takes effect.

15. Contact

For privacy questions or to use your rights, email hello@loopdraw.app. Our Terms of Use are at loopdraw.app/terms.

All 28 tools · Questions