Privacy Policy
Last updated: 29 May 2026
This Privacy Policy explains what data USA Sky PDF collects about you, what we do with it, how long we keep it, and the rights you have over it. We try to keep this short and honest. If anything here is unclear, email support@usapdfsky.com and we will explain plainly.
Who we are
The data controller is AstraSkyAI FZE LLC, a single-member limited liability company organised in the State of Wyoming, United States, with registered address at 30 N Gould St, Ste 4000, Sheridan, WY 82801, United States.
What we collect
- Email address — only if you create an account or subscribe to Pro.
- Files you upload to server-side tools — OCR, office-format conversions, and Compress send your file to our servers over an encrypted connection. The file is processed and then automatically deleted within 24 hours (see “How long we keep things” below). Most other tools run entirely inside your browser and the file never leaves your device.
- Payment information — handled by Stripe. We never see your full card number; we only receive a Stripe customer ID, a subscription status, and the last four digits of the card for receipts.
- IP address and request metadata — collected by Cloudflare for fraud prevention, rate limiting, and DDoS protection. We do not use IP for advertising, profiling, or device fingerprinting.
- Basic analytics — Cloudflare Web Analytics records page views and approximate region using a cookieless beacon. No cross-site tracking. No third-party advertising network.
What we do not do
- We do not sell your personal information. Not to data brokers. Not to advertisers. Not to anyone.
- We do not share data for cross-context behavioural advertising.
- We do not fingerprint your device.
- We do not train any machine-learning model on your files, your edits, or your prompts.
- We do not run third-party ad-network code without your consent. One exception exists, and it is opt-in: if you choose “I Accept” in the cookie banner, we load Google's conversion-measurement tag (gtag.js) so we can tell when an ad click led to a sign-up. It never loads if you choose “Essential Only”, and you can withdraw consent any time from the “Cookie preferences” pill.
How long we keep things
- Files processed on our servers: deleted within 24 hours by an automated AWS S3 prefix-lifecycle rule.
- Account email and basic profile: retained until you delete your account.
- Payment records and invoices: retained for 7 years to satisfy US tax-record requirements.
- Server logs (IP + request metadata): retained for up to 30 days for security and fraud-prevention purposes, then rotated out.
Sub-processors
We use the following service providers to operate USA Sky PDF. Each is contractually bound to handle your data only on our instructions and to safeguard it.
| Sub-processor | Activity | Location |
|---|---|---|
| Cloudflare | CDN, WAF, Workers, DNS, analytics beacon | Worldwide edge network |
| AWS Lambda | Server-side file processing (OCR, conversions, compress) | US-East-1 (Virginia, USA) |
| AWS S3 | Temporary upload + output storage (24-hour lifecycle) | US-East-1 (Virginia, USA) |
| AWS DynamoDB | Job state and subscription metadata | US-East-1 (Virginia, USA) |
| Stripe | Payment processing | United States |
| Zoho | Transactional and support email | India / United States |
| Google (only with consent) | Ads conversion measurement (gtag.js) — loads only after you accept optional cookies | United States |
International data transfers
USA Sky PDF is operated from the United States. If you use the Service from outside the US, your data is transferred to and processed in the US (and in India for support email through Zoho). For transfers from the EEA, UK, and Switzerland, we rely on the European Commission’s Standard Contractual Clauses with our sub-processors and on equivalent safeguards under UK and Swiss law.
EU representative under GDPR Article 27: [TO BE APPOINTED]. Until an EU representative is in place, EEA users may exercise GDPR rights by emailing support@usapdfsky.com with the subject line “EU privacy request.”
Children under 18
USA Sky PDF is not designed for and may not be used by anyone under the age of 18. We do not knowingly collect personal information from people under 18. If we learn that we have received information from a person under 18, we delete it. If you are a parent or guardian and believe your child has provided us with information, email support@usapdfsky.com and we will remove it.
Your rights
The rights you have over your personal data depend on where you live. The sections below summarise the most common frameworks and how to exercise the rights they grant. In every case the contact channel is the same: support@usapdfsky.com.
EEA and United Kingdom (GDPR / UK GDPR)
If you live in the European Economic Area or the United Kingdom, you have the right to access, rectify, erase, restrict the processing of, port, and object to the processing of your personal data, as well as the right to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your national supervisory authority (for example the Irish Data Protection Commission, the French CNIL, or the UK Information Commissioner’s Office).
To exercise any of these rights, email support@usapdfsky.com with the subject line “EU/UK privacy request.” We respond within 30 days as the GDPR requires.
California (CCPA / CPRA)
If you reside in California, you have the right to (a) know what personal information we collect about you and how we use it, (b) request a copy of that information, (c) request deletion, and (d) not be discriminated against for exercising these rights.
We do not sell your personal information. We do not share it for cross-context behavioural advertising. There is no “Do Not Sell My Personal Information” link to display because we have nothing to opt out of — the underlying activity does not happen.
To exercise your CCPA rights, email support@usapdfsky.com with the subject line “California privacy request.” We respond within 45 days as the CCPA requires. You may also authorise an agent to act on your behalf — they must provide written permission from you plus their own identification.
Other US states (Virginia, Colorado, Connecticut, Utah, Texas, Oregon)
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and Oregon (OCPA) have substantially similar rights to access, correct, delete, and port the personal data we hold about them, and to opt out of targeted advertising and the sale of personal data. As stated above, we do not sell personal data and we do not engage in targeted advertising, so the opt-out controls reduce to “there is nothing to opt out of.” To exercise the remaining rights, email support@usapdfsky.com with the subject line “State privacy request — [your state].”
Canada (PIPEDA)
If you live in Canada, the Personal Information Protection and Electronic Documents Act gives you the right to know what personal information we hold, access it, correct it, and withdraw consent for its use. Email support@usapdfsky.com to exercise these rights. You may also complain to the Office of the Privacy Commissioner of Canada (OPC) if you believe we are not handling your data properly.
Singapore (PDPA)
Under Singapore’s Personal Data Protection Act, you have the right to access and correct the personal data we hold about you and to withdraw consent for its collection, use, or disclosure. Email support@usapdfsky.com to exercise these rights. You may also complain to the Personal Data Protection Commission (PDPC).
Thailand (PDPA 2019)
Thailand’s Personal Data Protection Act 2019 grants rights to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent. Email support@usapdfsky.com. You may also complain to the PDPC of Thailand.
Philippines (Data Privacy Act 2012)
The Philippines Data Privacy Act of 2012 gives you the right to be informed, to access, to rectify, to erase or block, to object, and to data portability, as well as the right to damages and the right to file a complaint with the National Privacy Commission (NPC). Email support@usapdfsky.com to exercise these rights.
Indonesia (UU PDP 2022)
Indonesia’s Personal Data Protection Law (UU PDP No. 27/2022) grants rights to access, correct, delete, restrict, and withdraw consent for the processing of personal data, and the right to complain to the national personal-data-protection authority. Email support@usapdfsky.com to exercise these rights.
Malaysia (PDPA 2010)
Malaysia’s Personal Data Protection Act 2010 gives you rights of access and correction over the personal data we hold about you, as well as the right to withdraw consent and to complain to the Department of Personal Data Protection (JPDP). Email support@usapdfsky.com to exercise these rights.
Vietnam (PDPL 2023)
Vietnam’s Decree on Personal Data Protection (No. 13/2023/ND-CP) grants rights to consent, access, and correction of your personal data, and the right to withdraw consent for its processing. Email support@usapdfsky.com to exercise these rights.
India (DPDP Act 2023)
India’s Digital Personal Data Protection Act 2023 gives you the right to access, correct, erase, and seek redress over the personal data we process. For grievance redress in India, email support@usapdfsky.com with the subject line “India DPDP grievance.” This same address is the designated grievance-contact channel — a dedicated Grievance Officer alias will be added once support volume warrants it.
Security
We use HTTPS everywhere, encrypt server-side file uploads in transit, scope access to our infrastructure on a least-privilege basis, and rotate credentials regularly. The details are in our Security page.
No security system is impenetrable. Even with reasonable safeguards in place, breach risk is never zero. Do not upload material that cannot tolerate any risk of disclosure — use a desktop tool on an offline machine for that material instead.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date at the top of the page and, for changes that affect what data we collect or how we use it, notify account holders by email before the change takes effect.
Contact
- Data controller
- AstraSkyAI FZE LLC
30 N Gould St, Ste 4000
Sheridan, WY 82801, United States - Privacy requests
- support@usapdfsky.com (subject: “Privacy request — [your country]”)
- EU representative (Article 27)
- [TO BE APPOINTED — until then, use support@usapdfsky.com for EU privacy requests]