Privacy policy
Last updated: October 13, 2026
This is a translation for your convenience. In case of discrepancy, the Spanish version prevails.
At KingPDF, privacy is part of the product design. This policy explains what data we process, why, for how long and what rights you have. It applies to the website https://kingpdf.app and to our desktop, Android and iOS apps.
1. Data controller
- Owner: Oscar Ricardo Damian Garcia
- Mexican tax ID (RFC): DAGO950102P31
- Address: Calle Veracruz 9, Barrio Tepetitla, C.P. 56650, Temamatla, Estado de México, Mexico
- Privacy contact: [email protected]
2. How we handle your documents
The simple tools (merge, split, organize, rotate, page numbers, watermark, crop, edit, sign, protect, unlock, scan, JPG to PDF and PDF to JPG) run entirely in your browser or in the installed app: those files are not sent to our servers and we cannot access their content.
The exceptions are:
- Maximum-quality tools: PDF to Word, Excel, PowerPoint and text; Word, Excel, PowerPoint and HTML to PDF; OCR, compress, repair, redact and compare. To preserve the original layout, text and quality, the file is sent encrypted (HTTPS) to our server, processed only in memory or in a temporary folder and deleted as soon as you receive the result. It is not kept, its name and content are not logged, it is not used for any other purpose and nobody reviews it. If you prefer your files never leave your device, the desktop or mobile app performs these conversions offline.
- Any file you voluntarily attach in the contact form, which is handled as described in section 3.
3. Data we process
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email, name and password (hashed) if you create an account | Managing your account and signing in | Performance of the contract | While the account is active |
| Activity history (tool, file name and size, date) | Showing your recent activity | Performance of the contract | Last 100 tasks; you can delete it anytime |
| File sent to a maximum-quality tool (conversions, OCR, compress, repair, redact or compare) | Producing the document you request | Performance of the contract | None: only during the conversion (seconds or minutes) |
| Contact form messages and attachments | Answering your request | Consent | 12 months |
| IP address and technical request data | Security, abuse prevention and usage limits | Legitimate interest | 30 days at most |
We do not use your data for advertising, we do not build profiles and we do not sell or share data with third parties.
4. How we protect your data
- HTTPS encrypted connection with HSTS across the whole site.
- Personal data encrypted in the database (AES-256-GCM).
- Passwords stored as hashes (scrypt) with a unique salt; we never know them.
- Sessions using secure cookies (HttpOnly, Secure, SameSite=Strict).
- Per-user access control: only you can see your records.
- Sign-in attempt limits, anti-bot protection and database monitoring.
- Regular review of dependencies for vulnerabilities.
5. Data processors
We rely on Vultr (server located in Mexico City, where the database is also stored) and Cloudflare (content delivery and site protection, and anonymous cookie-free visit statistics with Cloudflare Web Analytics) and, when enabled, Cloudflare Turnstile for anti-bot checks. All of them act under contract and with appropriate safeguards. International transfers, if any, rely on standard contractual clauses or other recognized mechanisms.
6. OCR language data
The first time you use the app's OCR in a language, the app downloads the recognition model from a public content delivery network (CDN). That download does not include your documents.
7. Your rights
You can exercise at any time your rights of access, rectification, cancellation and objection (ARCO rights under Mexican law), as well as withdraw your consent, limit the use of your data and request its portability:
- From My account you can download your data (JSON), delete your history and permanently delete your account.
- By writing to [email protected]. We will reply within one month at most.
If you believe we have not handled your rights properly, you can contact the personal data protection authority of your country (in Mexico, the Secretaría Anticorrupción y Buen Gobierno).
8. Minors
The service is not intended for children under 14. We do not knowingly create accounts for children under that age.
9. Cookies
We only use strictly necessary technical cookies. See the Cookie policy.
10. Changes to this policy
If we make important changes, we will notify you on the site or by email before they take effect.