Privacy Policy

Last updated: 26 October 2026

This policy explains what personal data AK Smarts PDF (“the app”), provided by AK Smarts (“we”, “us”), collects, why, and your rights. It is written to meet India’s Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and its rules, and the basic principles of the EU GDPR for visitors from Europe.

1. Your documents stay on your device

PDFs, pictures and other files you open, edit, convert, compress, merge or sign are processed inside your own browser or the installed app on your device. They are not uploaded to our servers, and we cannot see, read or store them.

For e-Sign, only a short fingerprint of the document (a SHA-256 hash, from which the document cannot be rebuilt) is sent to our server to be signed with the certificate issued to your account (or, if you sign without an account, with a one-time certificate carrying the name you type). For DSC signing, your certificate and private key stay on your device; we only record that a signature was made.

2. What we collect

• Account data (if you create an account): your name, email address, a one-way scrambled (hashed) password, account role and creation date.
• Licence and payment records: your plan, trial and licence dates, licence keys you activate. If you pay online, the payment is handled by our payment provider (for example Razorpay); we receive the payment status and reference, never your full card or bank details.
• Signature log: for each e-Sign or DSC signature, the date and time, file name, document fingerprint, signer name and IP address. This lets you and us prove when a signature was made.
• Device and security data: a random device number stored in your browser, browser type, IP address, sign-in times and active sessions. We use this to run licences (device limits), prevent abuse and keep accounts safe.
• Usage statistics: visits and which tools are used. We never record file names or file contents in these statistics.
• Messages you send us (for example by email).

3. Why we use it (purpose and legal basis)

• To provide the app, your account, licences and e-Sign (performance of our agreement with you; your consent under the DPDP Act when you sign up).
• To secure the service, prevent fraud and misuse, and keep signature records (legitimate use and legal obligations).
• To improve the app using anonymous or aggregated statistics.
• To meet legal requirements, for example responding to lawful requests from authorities.

We do not sell your personal data and do not use your documents for any purpose.

4. Advertising

The app does not currently show ads. If ads are added later (for free users only), this section and the Cookie Notice will be updated first.

5. Who we share it with

Only with service providers that help us run the app, under contracts that protect your data: hosting (for example Render), database hosting (for example Neon), email delivery, the payment provider and, if ads are on, Google. Some providers may store data outside India; where they do, we use providers with appropriate safeguards and comply with any restrictions notified by the Government of India.

6. How long we keep it

• Account and licence data: while your account is active, and up to 3 years after it is closed, for accounting, tax and dispute purposes.
• Signature log: up to 8 years, because signed documents may need to be proven later.
• Security logs and usage statistics: up to 1 year.

7. Your rights

Under the DPDP Act (and GDPR where it applies) you can: get a summary of the personal data we hold about you; ask us to correct or complete it; ask us to erase it (subject to records we must keep by law); withdraw consent (this may end your account); nominate another person to exercise your rights in case of death or incapacity; and file a grievance with us and, if not resolved, with the Data Protection Board of India (or your local data protection authority in the EU). Email aksmartspdf@gmail.com to use any of these rights. We reply within 30 days.

8. Security

We use HTTPS encryption, hashed passwords, optional 2-step login for administrators, strict browser security settings and access limits. No system is perfectly secure; if a personal data breach affects you, we will inform you and the Data Protection Board as the law requires.

9. Children

The app is not meant for children under 18. We do not knowingly collect data of children without verifiable parental consent. If you believe a child has given us data, contact us and we will delete it.

10. Grievance Officer

In line with the IT Act, 2000 and the IT Rules, our Grievance Officer is Anil Khot, AK Smarts, Bengaluru. Email: aksmartspdf@gmail.com. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

11. Changes

We may update this policy. The date at the top shows the latest version. Important changes will be shown in the app before they apply.