Nutrient respects the privacy of its users (“you”) and has developed this privacy policy (“Privacy Policy”) to demonstrate its commitment to protecting your privacy. During the course of our activities, we will collect, store, and process your personal data. Our use and sharing of your personal data and your choices about such processes are described in this Privacy Policy. Please read this document carefully before you use our website, software, and applications, our official social media pages that we control, or other mobile interactive features (each our “Service,” together our “Services”). As some of our entities process data in the European Union, this Privacy Policy is developed in accordance with, and your data is processed in accordance with, the General Data Protection Regulation. The data controller for the processing of your Personal Data as defined herein is Nutrient, 4509 Creedmoor Road, Suite 503, Raleigh, NC 27612, USA.  As used herein and on our websites, “Nutrient” means PSPDFKit GmbH and its affiliates, including Orpalis Imaging SAS, Muhimbi Ltd, Aquaforest Ltd, Integrify, Inc., and PSPDF US, Inc.  If you have any questions or concerns regarding this Privacy Policy, please contact us by email at [email protected] or by postal mail to Nutrient, 4509 Creedmoor Road, Suite 503, Raleigh, NC 27612, USA.

Data we may collect and how we use it

By agreeing to our Privacy Policy, we may collect, store, retain, parse, and process:

{{list-style-plus}}

• “Personal Data,” which means information that identifies you as an individual, such as your name, user name, title, postal address (including billing and shipping addresses), telephone number (including home and mobile phone numbers), email address, IP address, company you work for and its address, credit and debit card number, avatar picture, gender, country of residence, signature; and
• non-personally identifiable data (“Other Data”), which means any information that does not reveal your specific identity, such as: browser and device information, license ID and type, operating system and uptime, app version and bundle ID, language used, server log file information, the name of your host or the domain name of the website that referred you to our website or Services, site data, demographic information, information collected through cookies, anonymous application usage data, and other information provided by you.

Products

Upon activation of our Products, as a technical requirement to run the Services, we may collect the following Other Data:

{{list-style-plus}}

• Model and version of the device used
• Device ID, name, model
• License ID and type
• Operating system version and uptime
• App version and bundle ID
• Language used

Nutrient API

When you register to use the Nutrient Document Web Services API (collectively with all related software, application programming interfaces, data, components, materials, services, updates, and documentation, the “API”), we may collect the following Personal Data: registration details (including password and date of registration), personal information (including full name, company name, address, city, state, zip code, country, VAT ID, and website), and payment information (including date of payment, invoice number, currency, fee amount, and type of purchase plan).

When using or accessing the API, we do not collect the content, metadata (except page count and MIME type), or other data from the files you upload. We do collect usage statistics, including the number of files uploaded, the number of processing actions taken, the number of errors, and the size of files uploaded and files output. In the course of using the API, your files are transferred to and temporarily stored on our servers. We do not read or extract any data from the content of your files or their metadata (except page count and MIME type), and we do not make or maintain copies of your files. All files uploaded to the API are deleted from our servers within 24 hours. Your uploaded files are never given out or sold to anyone.

Nutrient PDF Viewer and Nutrient PDF inspector applications

To improve the Nutrient PDF Viewer Application, we may collect non-personal behavioral framework events, such as crash reports and anonymized usage analytics. The purpose of such information is for us to diagnose errors and gauge the frequency of use so that we can help prioritize development improvements. We use Google Firebase to collect and store the information. As we only use this data for statistical analysis and development improvement, we do not combine it with other data or information.

Nutrient PDF Inspector does not collect any data from you, including any Personal Data or Other Data.

Product development support

To improve our products, we may collect non-personal behavioral framework events, such as when a user adds a bookmark or prints a PDF. The purpose of such information is for us to gauge the frequency of use so that we can help prioritize development improvements. We use Google Firebase to collect and store the information. As we only use this data for statistical analysis and development improvement, we do not combine it with other data or information.

Websites

For traffic analysis purposes, we collect Other Data of mouse activity coordinates and their IP address of visitors to our websites. For collecting this information, we may use cookies and similar technology like pixel tags. As we only use this data for statistical analysis, marketing, and website improvement, we do not combine it with other data or information.

We also collect Other Data of visitors to our websites via the Google Analytics platform provided by Google, Inc., a US-based company, for purposes of analyzing and interpreting how our visitors interact with our website. We track data such as what pages a visitor has viewed, whether a prospective customer has started one of our contact forms, and whether a prospective customer has completed one of our contact forms, and we may segment this data depending on the various products in which the prospective customer is interested. Furthermore, with Google Analytics User-ID, we also track a unique per-device random ID assigned through the service to visitors. All of this data is anonymized so that we have no way of determining the exact source of the data. Google may disclose this data to third parties if this is required by law or if third parties process this data on behalf of Google. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you decline cookies, you may not be able to use the full functionality of our website. By using our website, you agree to the processing of collected data in the manner and for the reasons described above.

We also may collect Personal Data and Other Data of visitors to our websites via services provided by Doorbell.io Ltd, a UK-based company, which collects, manages, and analyzes customer feedback provided on our website. Some of the data collected are the pages visited by a prospective customer and a prospective customer’s email address if a customer communication is initiated by the prospective customer. For more information about the data collected by the service, please visit https://doorbell.io/privacy-policy.

We also collect Other Data of visitors to our websites via services provided by Hotjar Ltd., a Malta-based company, to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.), which enables us to build and improve our Services with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular, a device’s IP address [captured and stored only in anonymized form], device screen size, device type [unique device identifiers], browser information, geographic location [country only], and preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with additional data on an individual user. For further details, please see Hotjar’s privacy policy by clicking on this link. You can opt out to the creation of a user profile, Hotjar’s storing of data about your usage of our site, and Hotjar’s use of tracking cookies on other websites by following this opt-out link.

We also collect Personal Data and Other Data via HubSpot, including but not limited to your name, email address, phone number, and usage data through our website. This data is collected through forms, cookies, and other tracking technologies to enhance your experience, provide personalized marketing, and improve our services. This service helps us automate our marketing efforts and manage customer relationships more effectively. We have agreements in place with these providers to ensure that your data is processed securely and in compliance with relevant privacy laws. You have the right to access, correct, or delete your personal data at any time. You can also opt out of marketing communications or data tracking by managing your preferences here. For more information about the data collected by the service, please visit https://legal.hubspot.com/privacy-policy

To change or withdraw consent to website tracking you can update your cookie preferences here:

Technical support

For the purpose of providing technical support for our Services, we collect and store your email address, as well as any additional information that you provide in your support requests. As a means to properly deal with incoming support requests, we may need to use the submitted information (email address) to contact you in order to gain further information needed to assist with your request, if necessary.

We may collect Personal Data and Other Data you provide to us or which we obtain from your device or activities by using our Services, e.g. through our websites, subscribing to our mailing lists, contacting our technical support directly, or through other sources like social media platforms.

Cookies and plugins

To optimize your experience while you are using some of our Services, we collect data by using cookies. We use cookies to automatically collect certain Other Data, such as the browser and device you are using, the hostname, the website that has referred you to us, language, settings, etc. Cookies are small text files that are stored on your browser or device. They are used in various ways, e.g. to analyze users’ behavior on a website, or for personalization reasons based on a user’s preferences.

In the section above, we explained which tools we use exactly and how you can either delete them if they are already placed on your computer or decline their use. However, you may not be able to use some features of our Services properly if you decide to block or delete cookies.

We may place links and plugins from plugin providers such as Facebook, Google, YouTube, Twitter, LinkedIn, Intercom, Google Play Store, Apple Store, or certain media on our website. However, these services may use their own cookies or web beacons to collect information about users who interact with links to their websites.

If you visit our website, your browser connects directly with the servers of plugin providers, and the content of the plugin may be directly generated and incorporated on our website by your browser. Therefore, plugin providers may be enabled to track and connect your visit and activities on our website with your profile set on the plugin provider’s website. Any information about interactions, such as comments or the use of “like buttons,” may be directly transmitted to the plugin providers’ websites and may be stored by the relevant plugin provider. If you want to avoid such transmission and storage of your data, you may prevent this by logging out of your relevant profiles with plugin providers before using the plugin. For further information about the purpose and extent of data usage and processing by plugin providers on our website, please find the relevant providers’ privacy policies below:

{{list-style-plus}}

• www.facebook.com/policy.php
• policies.google.com/privacy
• www.intercom.com/privacy
• www.twitter.com/privacy
• www.linkedin.com/legal/privacy-policy
• play.google.com/about/play-terms.html
• https://www.apple.com/legal/internet-services/itunes/us/terms.html

We use data obtained through the above providers to customize and to improve our Services, and to evaluate the effectiveness of our content, advertising, programming, and/or other activities.

Nutrient licensing services

When you use our Services, which connect to the Nutrient Licensing Service, we may store the email address submitted to us. We may use your email address to send you important notifications regarding the Service being used. In addition, we may connect your email address with the information we collected at activation of the Service for technical support purposes. If you upload or transfer a document to a demo of our Services or as part of your technical support request, we may store your IP address for technical reasons. We are not able to guarantee the confidentiality of any information contained in documents uploaded to a demo of our Services or as part of your technical support request. Hence, please consider carefully what you upload. On the basis of this information, you consent to public disclosure of the information you upload to a demo of our Services or as part of your technical support request, unless your license agreement with us provides otherwise.

We store your Personal Information with adequate protection. The servers on which we store your Personal Information may be located within the European Economic Area (EEA). We generally do not store your Personal Information any longer than is necessary to provide the Service to you. At termination of your licensed use of a Service, we will delete any Personal Information we collected from you without undue delay, unless further storage of such Personal Information is required for a valid purpose. Please be aware that an encrypted storage of your Personal Information in our backup system may be necessary for technical reasons for a period of six months or more from the date of termination of the Service.

How we use collected data

We limit the collection of Personal Data and Other Data to the amount required to review, analyze, provide, adapt, and/or improve quality of our Services, products, advertising, customer support, fraud fighting, testing and calibration of our Services, for verification of your eligibility and credit to purchase or access our Services, and to inform you about changes and news to our Services.

All Personal Data we collect will only be processed by our personnel and/or the above-referenced third-party providers to the extent needed except as otherwise explained in this Privacy Policy. Personal Data will not be disclosed to third parties unless it is necessary for execution of your order, in particular for delivery of products or services by logistical partners, for investigating your credit status and the handling of payments (if you have granted us permission to do so), or if the disclosure is permitted by law. With regard to the handling of payments, we use and protect your data with respect to and in compliance with the PCI DSS 3.1 standards by the PCI Security Standards Council.

Payments for licensed use of our Products may be processed by our payment service providers: Stripe, Inc., with a registered office at 510 Townsend Street, San Francisco, CA 94103, USA (before providing your personal data to Stripe, Inc., please be sure to read their privacy policies available at https://stripe.com/); Paddle.com Market, Ltd., with a registered office at 15 Briery Close, Great Oakley, Corby, Northamptonshire, NN18 8JG, United Kingdom (before providing your personal data to Paddle.com Market, Ltd., please be sure to read their privacy policies available at https://paddle.com/).

In the event that we buy or sell any business or asset, we may disclose Personal Data to the prospective seller or buyer of such business or assets. Furthermore, we may disclose Personal Data to third parties, if we or substantially all of our assets are acquired by a third party and Personal Data will be one of the transferred assets.

We may process and disclose Personal Data to comply with any legal obligation, to enforce or apply any contract with you, or to protect our legitimate business rights, property, or safety of our personnel, customers, or others.

We may combine Personal Data and Other Data we collect with additional data from other sources. We may share Personal Data and Other Data to advisors, advertisers, and investors for the purpose of conducting general business analysis or other business purposes.

If you subscribe to one of our mailing lists, we will use your email address, name, title, and certain Other Data for providing you with news about our Services. We use this data to keep you up to date about our product development, the launch of new products, what we write about on our blog, conferences we attend, etc. You may unsubscribe from our mailing lists by clicking the unsubscribe button in each of our emails or in your profile settings.

We will only use your data legally. If you believe that we are not using your data in a legal way or wish to inquire about your rights regarding your data, you may do so by sending us an email at [email protected].

Third party subprocessors

Email

Emails delivered to our email addresses are stored on the servers of Google LLC, a US-based company. Effective September 1, 2023, Google LLC has certified that it adheres to the EU-U.S. and Swiss-U.S. Data Privacy Frameworks ("DPF") and the UK Extension to the EU-U.S. DPF.

Support

For providing proper technical support to users of certain of our Services, we have commissioned Zendesk, Inc. as helpdesk provider, and to whom we disclose the information contained in support requests, including your email address. Zendesk, Inc., a US-based company, has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).

List of third party subprocessors

We engage certain subprocessors that assist us in providing our Services. A list of our third party subprocessors is available at www.nutrient.io/legal/subprocessor-list/.

Data retention

We will store your data as long as it is required for our business purposes and/or as required by law (e.g. for tax and accounting reasons).

Right to information

You may request information about your data which is processed by us. Furthermore, you have the right to have your stored data corrected or deleted if the data is incorrect or has been processed contrary to the provisions of the General Data Protection Regulation. Please note that we may require proof of your identity before we answer your request. Please send your request by email to [email protected] or by postal mail to Nutrient, 4509 Creedmoor Road, Suite 503, Raleigh, NC 27612, USA.

Data protection

In accordance with the General Data Protection Regulation, we will take appropriate security measures to ensure that your Personal Data will not be processed illegally, changed or deleted, duplicated, or used by unauthorized third parties, and that it will be prevented from accidental loss or damage, unless otherwise described in this Privacy Policy and/or in the terms of your Master Subscription Agreement or End User License Agreement. We use commercially reasonable efforts to implement processes that seek to ensure the safety of your Personal Data from the time it is collected until the time it is deleted.

Use of our website by minors

If you are 14 years old or even younger, we will need the consent of your parent or legal guardian before you submit data via our Services. You are not permitted to submit data without such consent. If we receive any such data, we will stop processing this data as soon as we are informed.

Changes to this Privacy Policy

We may change this Privacy Policy at any time. All changes will be published on this website. Any changes to this Privacy Policy will become effective at the time that we publish the revised Privacy Policy on our website. Your use of our Services following these changes means that you expressly acknowledge and accept the Privacy Policy as revised. Therefore, please be sure to regularly review our Privacy Policy.

Data subject request

You may inquire as to your data subject rights or revoke your consent to this Privacy Policy as well as other rights, such as the processing of your Personal Data, in the future at any time by sending an email to [email protected].