Privacy Policy

Last updated: 22 October 2026

DocuPivot is a free set of online PDF tools at docupivot.com. It is a brand of ToolsPivot, run by the ToolsPivot team and operated from India. In this policy "DocuPivot", "we" and "us" mean that team. This page explains what happens to your documents when you use our tools, what other information we collect about your visit, who else receives it, and what you can do about it.

In brief

• Most of our PDF tools work inside your browser. Files you use with them are never uploaded to us.
• Some tools need our server. Files sent to them are processed by software on our own server and deleted automatically 30 minutes after the job is created.
• Your document is not sent to any third party, except when you use the AI features of the AI PDF Editor.
• We use cookies for the site to work and, if you agree, for analytics and advertising. A banner asks for your choice on your first visit.
• We do not sell your personal information.

What happens to your files

Tools that run in your browser

32 of DocuPivot's 57 tools, including merging, splitting, rotating, organising, signing, watermarking and the PDF Editor, run entirely on your device using browser technology such as pdf.js, pdf-lib and WebAssembly. The page loads the code; your browser does the work. The file you open, the pages you produce and anything you type into the document stay on your computer or phone. They never reach our server, so we have nothing to store, read or delete.

Tools that use our server

The remaining 25 tools need a server: converting Word, Excel and PowerPoint files (using LibreOffice), OCR on scanned pages, compression to an exact target size, adding or removing passwords, repair and similar processing, and the AI PDF Editor. When you use one of them:

• Your file is uploaded to our server and processed there by local software such as LibreOffice, Tesseract OCR and qpdf.
• The file and its result are kept outside the public web directory, so they cannot be opened through a web address.
• Both are deleted automatically 30 minutes after the job is created, whether or not you downloaded the result.
• Each file can be up to 100 MB, and each visitor can run up to 20 server jobs an hour. This limit protects the service from abuse.
• We do not read, mine or train anything on the contents of your documents.
• If a tool converts a web page to PDF, the address you enter is fetched by our server, so the website at that address receives a request from our server rather than from you.

The AI PDF Editor

The AI PDF Editor is the only DocuPivot tool that sends information about your document to a third party. To plan the edit you describe, it sends your typed request, the page count and page shapes, and the names of any form fields. If you use Translate or Summarize, it also sends the text of your document. The tool says this on the page before you use its AI features.

The AI providers we currently use are OpenAI, Google Gemini and OpenRouter. OpenRouter is a broker that passes the request to a further model provider on our behalf. Once your request reaches a provider, it is handled under that provider's own terms. Please do not use the AI features on confidential material. The AI features have a daily limit per visitor, and we keep a daily usage count to enforce it.

Other information we collect

When you visit

Like most websites, our server and our analytics tools record standard technical information: your IP address, browser type and version, device and operating system, the page that referred you, the pages and tools you use, and the date and time. For server tools we also keep a short usage record of which tool was used, from which IP address and when. We use this to run the tools, apply rate limits, stop abuse, fix problems and see which tools are popular.

When you contact us

• Contact form. Your name, email address and message, plus basic request details (IP address, browser user-agent and referring page) so we can reply and filter spam.
• Bug reports. Your name, email address, the page affected, the type of problem, your description and the same request details. You may attach up to 5 screenshots of up to 5 MB each. Screenshots are re-encoded when they arrive, which strips embedded metadata, and are stored outside the public web directory. Other file types are not accepted; the form asks for a Dropbox or Google Drive link instead, so that file stays in your own account.
• Newsletter. If you subscribe, your email address, so we can send it. Every newsletter has an unsubscribe link.

Please do not put passwords, card numbers or other secrets into a tool, a form or a message.

Cookies, analytics and consent

Cookies are small files your browser stores for a website. DocuPivot uses three kinds:

On your first visit a banner lets you accept or decline the non-essential (analytics and advertising) cookies. You can also block or delete cookies in your browser settings, although blocking essential cookies may stop parts of the site from working.

A note on Microsoft Clarity: it records session replays, a reconstruction of your visit including mouse movement, clicks, scrolling and page changes that can be played back. Clarity masks text input by default, but session replay is more intrusive than simple page counts, so we name it plainly. It is covered by the consent banner.

Advertising

DocuPivot has no paid tier. It is paid for by ads served through Google AdSense. Google and its partners may use cookies to show ads based on your visits to this and other websites. You can manage personalised advertising in your Google Ad Settings and read more in Google's advertising and privacy resources. If you decline advertising cookies in our banner, you may still see ads, but they should be non-personalised.

Who else receives information

We only pass information to the provider needed for the job, and each provider has its own privacy policy.

• Cloudflare sits in front of the whole site for security and caching, and provides Turnstile, which some tools use to check that you are human.
• Google AdSense serves the ads.
• Google Analytics and Microsoft Clarity provide analytics, if you consent.
• AI providers (OpenAI, Google Gemini, OpenRouter) receive the information described above, only when you use the AI PDF Editor's AI features.
• Dropbox or Google Drive, only if you choose to share a file link in a bug report. You set up that link yourself and we receive only the link.

We will keep this list up to date as tools change.

How long we keep things

An automated job runs every day to delete information when its time is up. These are the actual periods:

We may keep information for longer where the law requires it, or where we need it to resolve a dispute or enforce our Terms of Service.

Where your information is processed

DocuPivot is operated from India, and the operator is responsible for how your information is handled. Our main servers are hosted with Oracle Cloud in Saudi Arabia, with a standby server that holds the same data. Cloudflare works in front of the site worldwide and may cache pages and handle secure connections at a location near you. A relay server in the United States is used for some outbound requests. Our other providers operate in their own countries, mainly the United States and Europe.

If you use DocuPivot from the European Economic Area or the UK, your information will be transferred outside it. We rely on the safeguards our providers offer for those transfers.

Your rights

Depending on where you live, for example under the GDPR in the European Union and the UK, the CCPA in California, or the Digital Personal Data Protection Act in India, you may have the right to:

• access the personal information we hold about you, or receive a copy of it;
• have it corrected or deleted;
• object to, or ask us to restrict, certain processing;
• withdraw consent you have given, for example to analytics or advertising cookies;
• opt out of the "sale" or "sharing" of personal information. We do not sell personal information.

To use any of these rights, email info@docupivot.com and we will respond as the law requires. DocuPivot needs no account, so we may ask for details that help us find records linked to you. Often there will be nothing to find, because files from browser tools never reach us and files from server tools are gone within 30 minutes.

How we protect information

We delete uploaded files on a timer, store uploads and bug report screenshots outside the public web directory, re-encode uploaded screenshots to strip embedded data, keep API keys and other secrets on the server only, run a daily deletion job so old records do not pile up, and use bot protection and rate limits. No method of sending or storing data is completely secure, so we cannot promise absolute security.

Children

DocuPivot is not aimed at children under 13, or the minimum age in your country, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

When our tools or providers change, we will update this policy and the date at the top of the page. If you keep using DocuPivot after a change, you accept the updated policy.

Contact

For any question about this policy or your data, email info@docupivot.com or use our contact page.