This pdfFiller Privacy Notice ("Notice") applies to you when you provide your personal information to the provider companies listed on Contracting Entities Chart ("we," "us," or "ours") when communicating with us or interacting with our websites, mobile apps, products, or services ("Services").

This Notice describes what personal information we collect, why and when we collect it, how we may use, disclose, and retain it, and what choices or rights you may have about your personal information.

This Notice does not apply when we:

• Collect personal information from applicants for employment or internship through any recruitment channels. See our Recruitment Privacy Notice.
• Process personal information as a service provider or data processor for our enterprise customer(s). If you are an end-user of our enterprise customer(s), you should read that organization’s privacy notice and direct any privacy inquiries to it.
• Process when our Services link to third-party websites, including social media. Because we do not control such third-party or social media websites, third parties' privacy practices may differ from ours. We are not responsible for third parties' privacy practices and encourage you to read their privacy notices carefully.

We adhere to the principles of and are self-certified under the EU-US Data Protection Framework (DPF), the Swiss-U.S. DPF, and the UK extension to the EU-US DPF.

If you are a California resident, please see our California Residents Notice.

We may change or update this Privacy Notice, including by posting changes on our websites, but we will notify you of any material changes to it as required by law.

The types of personal information we may collect depend on your relationship with us and the Services you use: 

Contact Information

Your full name, email address, mailing address, or phone number.

Age, gender, marital status, and similar demographic details, if you register or participate in our surveys.

Demographic Information

Billing address, first and last four digits of a credit card number, expiration date, and the Services purchased.

Payment Information

Electronic Signature

A typed name, a drawn signature, or an image of a signature that you upload.

Documents

The files you upload to your account.

Any information necessary to provide you with support that you request or any communications with pdfFiller via our websites, mobile apps, chat features, or other third-party channels.

Information You Submit to Us

Hardware model, device browser, operating system, logs, session data, time stamps, your IP address, device IDs and information contained in cookies (see our Cookie Notice); clickstream data, such as your actions, clicks on pages or mobile application sites and its’ areas you visit, came from or leave to, time you spent on a page, access times, and other details about your use of and actions on our website.

Services Usage Information

Information about transactions, documents, or activities on the Services, such as subject lines, names, emails, devices, IP addresses, or authentication methods of parties to a transaction or document, including their actions in a transaction or document.

Transactional Information

Information 

We Create or Generate

We infer new information from other data we collect, including using automated means to generate information about your likely preferences or other characteristics.

Sensitive Information

Physical and coarse or precise location, including when you sign up for or use our Services or when you sign an electronic document.

Geolocation

Account Access Information

Your username in combination with a password, security or access code, or other credential that allows access to the Services account.

When you communicate with us or interact with our Services, we may collect personal information in the following ways:

• Create an account
• Contact us or fill out a form on our websites 
• Access or use our Services, with or without an account
• Participate in our surveys
• Sign up for communications from us
• Engage with us on social media, or community forums, or otherwise engage with us in person, online, or by phone, etc.

Directly

From You

• When you visit our websites, our web servers automatically collect information about your device.

• From third-party tracking tools that automatically collect your personal information, like Services Usage Information on our websites or emails, which may include browser cookies, web beacons, and fingerprints, and cookies based on device or browser settings. We may work with others to gather information on our platforms and elsewhere. We may do this on our websites and in emails we send to you. We collect information about individuals over time and across different websites and applications, including user activity on our websites, such as pages viewed, time spent on a page, access times, and other actions taken. 

     For more information, please see our Cookie Notice.

Automatically

• Business partners, such as affiliates or partners that refer you to pdfFiller, may provide us with information about you. 
• We may also collect personal information in connection with a corporate transaction. 
• If you register for our Services on another website or interact with social media networks on our site, the website or social media network may provide us with your personal information. 
• Other customers may give us your personal information. For example, a customer might send you a document to fill out and sign. When they do, they will give us your email address and name. If a customer wants to add you to an existing account, they will send us information about you. 
• Referral sources will share information about you to send a referral. If you use a third-party profile to set up your account with us, we will receive information associated with that third-party profile. 
• If you engage with pdfFiller by using a sign-in service such as Apple Sign-In, Microsoft, Google OneTap, or Facebook, we may receive information about you through that service.

From Others

We may use personal information for the reasons and in ways described below:

• Managing personal information and accounts
• Providing access to certain parts, functionalities, and features of our Services
• In the case of uploaded documents by you, we use personal information only as you instructed us and in an aggregated format
• By analyzing how our Services are used and interacted with to make more informed predictions, recommendations, and products. This includes training our artificial intelligence (AI) models, assessing certain content you send or display through our Services, conducting data analytics to develop insights about you, your needs, and preferences
• In communications from you, including requests for customer or technical support, about your account, activities on our Services, and policy changes
• Processing your financial information and other payment methods for products or Services purchased
• Localizing/translating the language and appearance of the Services and website content
• Allowing you to register for events or participate in surveys.

Providing and Improving Our Services

• Providing you with personalized services, content, offers, and recommendations, like newsletters, social media content, etc.
• Together with our advertising partners, we may use your personal information, including your approximate location and your activities on the Services, to facilitate the delivery of advertisements
• By offering sweepstakes, contests, or other optional marketing events. Note that in some jurisdictions, we are required to publicly share information about sweepstakes and contest winners.

Marketing and Advertising

• Pursuing our legitimate interests, such as direct marketing, and research and development (including marketing research)
• Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity
• Measuring interest and engagement in our Services
• Ensuring internal quality control and safety
• Authenticating and verifying individual identities, including requests to exercise your rights under this Notice
• Debugging to identify and repair errors with our Services
• Auditing relating to interactions, transactions, and other compliance activities
• Enforcing our agreements and policies
• Complying with our legal and contractual obligations

Other 

Administrative Purposes

Under 

Your Consent

We may also use personal information for other purposes that are clearly disclosed to you at the time you provide personal information or with your consent.

By 

Aggregating Data

We may de-identify or aggregate information collected through the Services and use that de-identified data for other lawful purposes.

Our use and transfer of information received from Google APIs to any other app adhere to Google API Services User Data Policy, including the Limited Use requirements. We use information received from Google APIs solely to provide or improve user-facing features that are prominent in the requesting application's user interface. We transfer such information only as allowed under the Limited Use Requirements and do not transfer or sell this information to third parties or to serve advertising.

Via Google API

To the extent we collect sensitive personal information, it is used solely to provide the Services to you and comply with the law, including detecting and preventing fraud and ensuring the Services safety. For example, we collect precise geolocation in our access logs and electronic signature digital certificates. We do not use sensitive personal information in our advertising initiatives or to market to you. 

We use information for other purposes as permitted by law or as we may disclose to you.

If the UK or European data protection laws apply and we act as a data controller, our lawful basis for collecting and using the personal information will depend on the type of personal information and the specific context we collect or use it. In such cases, we either use personal information only if we:

• have your consent to do so,
• need your personal information to provide our Services to you or perform a contract with you,
• have a legitimate interest in processing your personal information, and such an interest does not override your data protection interests or fundamental rights and freedoms.

We may have a legal obligation to collect, use, or retain your personal information to protect your or others' vital interests, when we:

• Create and manage your account to provide our Services to you and perform a contract with you
• Gather and record data associated with the use of a digital certificate or electronic signature to comply with regulations
• Use names and email addresses for email marketing with your consent (which you can withdraw at any time) or, where permitted under applicable law, based on our legitimate interests
• Gather and analyze your usage data to improve, safeguard, and ensure the security of our Services, and make conscientious adjustments to meet our customer needs based on our legitimate interest.

We may disclose personal information as follows:

We share all categories of your information with our service providers who process data on our behalf to support our Services.

Service Providers

We may share all categories of information with other companies under our common ownership or control that use it as described in this Privacy Notice. This includes current and future companies listed in the Contracting Entities Chart.

Affiliates

We may share your contact information with sponsors of events, webinars, or sweepstakes for which you register or other parties with whom we may engage in joint marketing activities.

Marketing Partners

We may share information when we must comply with legal obligations, regulations, or contracts, or to respond to court orders, administrative, or judicial processes, such as subpoenas, government audits, or search warrants. 

We may also share your information in events of a threat to the physical safety of any person, violations of our policies or other agreements, or to protect the legal rights of third parties, including our employees, users, or the public.

To Comply with Legal Obligations

All categories of your personal information may be disclosed or transferred to relevant third parties in the event of, or as part of the due diligence for, any proposed or actual reorganization, sale, merger, consolidation, joint venture, assignment, transfer, or other disposition of all or part of our business, assets, or stock (including in connection with any bankruptcy or similar proceeding).

Corporate Transactions

When you allow other users of our Services to access, use, or edit content in your account, we disclose that content to them. For example, if you send a document to others for review or signature, we make the contents of the document available to them. When you create a profile, other users may be able to view your profile information.

Other Users

When you create an account or user role with an email address assigned to you as an employee, contractor, or member of an organization (e.g., yourname@youremployer.com or yourname@nonprofit.org) or a personal email that you are authorized to use with an organization (e.g., yourname@gmail.com), that organization (if it is our customer with certain features) can find your account and take certain actions that may affect your account, including monitoring the activity, suspending, and terminating your account. If you have questions or concerns about the level of access and control your employee or organization has over your account, you should contact your organization for more information.

Your Employer

or Organization

We may share your personal information with our third-party advertising partners to target advertising to you.

Advertising Partners

We may share your personal information in other ways if you have asked us to do so or you have given consent.

Under Your Consent

Some of our Services also include integrations, references, or links to services provided by third parties whose privacy practices differ from ours. If you provide personal data to any of those third parties, or allow us to share personal information with them, that data is governed by their privacy notices.

Via Integrations, References, Links, etc.

We may disclose personal information for other reasons we may describe to you or as otherwise permitted by law.

We generally retain personal information for as long as necessary for the purposes we collected it, including satisfying any legal, financial, or reporting obligations, establishing or defending legal claims, or for compliance and protection.

When determining the optimal period for retaining personal information, we may consider factors such as:

• The volume, nature, and sensitivity of the personal information
• The impact on the Services, including the possibility for re-enrollment with the Services
• The potential risk of harm from unauthorized use or disclosure of your personal information
• The purposes for which we process your personal information
• Whether we can achieve those purposes through other means
• Applicable legal requirements, including mandatory retention periods, statutes of limitation, legal holds, and litigation requirements.

When we no longer need personal information we collected about you, we may either delete it, anonymize it, or isolate it from further processing.

Note that in some cases, even if you submit a data deletion request, we may be required to retain your personal information, such as to comply with the law, maintain records of transactions, exercise, establish, or defend legal claims, or protect against fraud or abuse of our systems.

You have certain choices about how we process your personal information in:

You are not required to provide your personal information by filling out your account profile, but if you do, you can access and review it. If any personal information is inaccurate or incomplete, you can update it in your account at any time. We may make changes to the personal information in your account if your employer (if the account is used for business purposes) or our enterprise customer, who controls your account, requests them.

Your 

Account Profile

Emails: You can opt out of our marketing emails by clicking on the "Unsubscribe" link in the email message or by using our pdfFiller Privacy Rights Request Form. 

SMS: You can opt out by following the instructions in such SMS or by requesting it in our pdfFiller Privacy Rights Request Form. We may only send you one more SMS to confirm opting out. After you opt out, we will only continue to send transactional or relationship SMS. 

Calls: To have your phone number added to our Do-Not-Call List, please request it in our pdfFiller Privacy Rights Request Form.

Marketing Communications

Cookies

and Other Related Technology

You can manage cookies in your browser settings or our Your Privacy Choices in the footer of our websites, or in other ways described in our Cookie Notice. Please note that declining cookies may affect your ability to use parts of our Services.

In some cases, you can opt out of the sale or sharing of your personal information for cross-context behavioral advertising ("CCBA") by clicking on the Your Privacy Choices link in the footer of our websites, or in our mobile apps settings. 

Opt-Out Preference Signals. You can also opt out of the sale or sharing of your personal information for CCBA by turning on the Global Privacy Control (GPC) in each browser you use. If you previously visited our website using the same browser without the GPC turned on, you may need to clear your browser cache or cookies for the GPC to be fully effective.

Right to Opt Out 

of CCBA

You may have additional rights regarding your personal information under certain laws ("Privacy Rights") as described below.

You can access and review personal information you provided us by logging into your account with us. 

You can request us to export your personal information to another third party or send you a copy.

You can request to know:

• How and why we collect and use your personal information
• What personal information we collect and the categories of recipients of your personal information

Our business purpose for using your personal information:

• How long we use or store your personal information
• How we determine relevant retention periods.

Access/Port

Personal Information

Correct

Personal Information

You can correct inaccurate personal information about you. In some cases, you can do this in your account by yourself. 

Delete

Personal Information

In certain cases, you can request us delete or stop using your personal information.

In certain cases, you can object to or restrict our use of your personal information.

Where we rely on your consent to process your personal information, you can withdraw consent you may have already provided at any time. This will not affect the lawfulness of the processing prior to the withdrawal of your consent. You have the right not to be discriminated against for exercising a privacy right.

Restrict Processing Personal Information

Opt Out 

of Targeted Advertising

You can opt out of targeted advertising by clicking on "Privacy Choices" in the footer of our websites or in the settings of our mobile apps. 

You can close your account by logging in and deleting it in the account settings yourself, or by contacting our Support Team. 

We encourage you to export all important information and documents from the account before closing it. Once closed, we will deactivate your account and begin deleting it along with its information and documents. When deleted, we cannot promise that you will be able to reactivate your account or recover information and documents from it.

Close 

Your 

Account

To exercise your Privacy Rights, please submit a request with our pdfFiller Privacy Rights Request Form at any time.

Where permitted by law, you may authorize an agent or legal representative to make a Privacy Rights request to us on your behalf, but we will need to verify their identity by either requesting authorization proof from you or an agent or legal representative.

If we declined your Privacy Rights request, you may contact us about our decision or submit a request again. If you are unsatisfied with our response to your Privacy Rights request, you have the right to raise questions or complaints with your local data protection authority at any time. If you are in the European Union (EU), you also have the right to lodge a complaint with a supervisory authority, but we encourage you to first contact us with any questions or concerns.

Every time you visit or interact with our Services from regions with laws governing personal information collection and use, your personal information will be transferred to us, our affiliates, and our subprocessors in the United States. pdfFiller Services will not function without data transfers to the United States.

We are headquartered in the United States, and when transferring any personal information to non-EEA countries, we comply with the personal data protection laws of the European Economic Area (EEA), the United Kingdom, Switzerland, and Brazil, as applicable to you.

All our US-based Contracting Entities comply with the principles and are self-certified under the EU-US Data Privacy Framework (DPF), the Swiss-U.S. DPF, and the UK Extension to the EU-US DPF ("DPF") about transfers of personal information from the EEA, Switzerland, and the UK. If this Notice conflicts with DPF, DPF prevails. You can see our certification or learn more about DPF on the DPF website.

We are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC). If third-party agents process personal information on our behalf in a manner inconsistent with the DPF, we remain liable for processing unless we prove we are not responsible for the event giving rise to any damages.

For other transfers to Third Countries, we adopted the Standard Contractual Clauses to facilitate the transfer of personal information from the EEA, Switzerland, and/or the United Kingdom to us or our service providers outside of these regions. Transfers outside the group of our companies are only made to organizations that agree to adhere to the security and privacy standards in pdfFiller Data Processing Addendum and Standard Contractual Clauses or use another valid alternative under data protection laws.

If you have questions or complaints about our compliance with the DPF, please contact us. For any complaints related to the DPF that cannot be resolved with us directly, you can contact JAMS Mediation, Arbitration and ADR Services, an independent US-based dispute resolution body, free of charge. Under limited circumstances and after exhausting other available dispute resolution mechanisms, binding arbitration is available to you to address certain residual complaints under the DPF.

This section applies to you only if you are a resident of California when you provide your personal information to us when communicating with us or interacting with our Services.

Based on how you interact with our Services, we may collect, use, and disclose your sensitive personal information (login details, password, or precise geolocation), but only as needed and to provide the Services.

pdfFiller may only disclose personal information to run its business as described below:

Third-Party Information is Disclosed to for a Business Purpose

Category of Personal Information

Identifiers:

Name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, or other similar identifiers.

• Payments Processors
• Data storage service providers
• Customer relationship management service providers
• Customer support service providers
• Technical, administrative, and information service providers

Commercial Information:

Products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Categories of Personal Information in Cal. Civ. Code Section 1798.80(e):

Name, signature, address, telephone number, bank account number, credit card number, debit card number, or any other financial information.

• Data storage service providers
• Customer relationship management service providers
• Customer support service providers
• Technical, administrative, and information service providers

Internet or Other Electronic Network Activity Information:

Browsing history, search history, and information regarding a consumer's interaction with an internet website, application, or advertisement.

Geolocation Data:

Precise physical location.

Inferences Drawn from Personal Information:

Consumer profiles reflecting a consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

• Data storage service providers

• Technical, administrative, and information service providers

Sensitive Personal Information:

Records that are directly related to a student and maintained by an 

educational agency or institution, or by a party acting for the agency or institution.

Characteristics of Protected Classifications under California or 

Federal Law:

Age (over 40), sex (including gender), gender identity or expression, marital status, military and veteran status.

Non-Public Education Information (as defined in 20 U.S.C. 1232g; 34 C.F.R. Part 99):

Records that are directly related to a student and maintained by an educational agency or institution, or by a party acting for the agency or institution.

Biometric Information:

Physiological, biological, or behavioral characteristics, including DNA, that can be used, singly or in combination with each other or with other identifying data, to establish individual identity, such as imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.

Not Processed

Sensory Information:

Audio, electronic, visual, thermal, olfactory, or similar information.

Professional or employment-related information:

Job application or resume information, past and current job history, and job performance information.

pdfFiller does not sell or otherwise monetize personal information except for sharing it only for cross-context behavioral advertising (CCBA) as described below:

Category of Personal Information

Third-Party Shared With

Identifiers:

Name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, or other similar identifiers.

Commercial Information:

Products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

• Advertising Networks
• Social Media

Internet or Other Electronic Network Activity Information:

Browsing history, search history, and information regarding a consumer's interaction with an internet website, application, or advertisement.

Geolocation Data:

Precise physical location.

Inferences Drawn from Personal Information:

Consumer profiles reflecting a consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Categories of Personal Information in Cal. Civ. Code Section 1798.80(e):

Name, signature, address, telephone number, bank account number, credit card number, debit card number, or any other financial information.

Characteristics of Protected Classifications under California or Federal Law:

Age (over 40), sex (including gender), gender identity or expression, marital status, military and veteran status.

Biometric Information:

Physiological, biological, or behavioral characteristics, including DNA, that can 

be used, singly or in combination with each other or with other identifying data, to establish individual identity, such as imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.

Not Processed

Sensory Information:

Audio, electronic, visual, thermal, olfactory, or similar information.

Professional or employment-related information:

Job application or resume information, past and current job history, and job performance information.

Non-Public Education Information (as defined in 20 U.S.C. 1232g; 34 C.F.R. Part 99):

Records that are directly related to a student and maintained by an educational agency or institution, or by a party acting for the agency or institution.

Sensitive Personal Information:

Not used for CCBA

Records that are directly related to a student and maintained by an educational agency or institution, or by a party acting for the agency or institution.

Beyond the rights listed in Your Privacy Rights section, California residents may exercise the following additional rights:

• Limit Use of Sensitive Personal Information: In some circumstances, California law allows you to limit the use and disclosure of your sensitive personal information. As noted above, we collect login information for the limited purpose of allowing you to access your pdfFiller account and as required to maintain audit trails of document or transaction activity. We do not collect or use other sensitive personal information for other purposes.
• Right of No Retaliation: You have the right not to receive discriminatory treatment for the exercise of your California privacy rights, subject to certain limitations, including if you are an employee, applicant, or independent contractor of our business.
• Right to Know if Personal Information was Disclosed to Third Parties: We do not disclose personal information to any third parties for their direct marketing purposes (as defined by California Civil Code section 1798.83 or "Shine the Light" law). However, "Shine the Light" law allows California residents who provided personal information to and established a business relationship with a business for personal, family, or household purposes to request information whether the business disclosed personal information to any third parties for direct marketing purposes.

To exercise your privacy rights under California law, please use our pdfFiller Privacy Rights Request Form, indicating your residence in California.

The metrics below reflect the number of California consumer requests to pdfFiller, received and processed in 2024: 

Request Type

Total Received

Fulfilled

Not Fulfilled*

Avg Days to Process

35

35

0

1

Access

11

80

Delete

108

28

28

4

1

3

Correct

* Requests were not fulfilled either because no personal information was stored, the requester did not complete the verification, or the requester's jurisdiction did not grant the respective right. 

Our Services are not designed for or marketed to minors under 18. However, the users of our Services may send documents that collect personal information about minors. Such users are responsible for obtaining appropriate consents from the minor's parent or legal guardian. If you are a parent or legal guardian and believe we store your minor's personal information, please use our pdfFiller Privacy Rights Request Form for requests related to your minor's personal information. 

Because the Internet is not 100% secure, and we cannot promise that your use of our Services will be completely secure, we use reasonable security measures as required by relevant laws. We encourage you to use caution when using the Internet, including not sharing your passwords to our Services.

We developed and published this Notice with industry-standard technologies in line with the World Wide Web Consortium's Web Content Accessibility Guidelines (WCAG) 2.1. You can Print or save this Notice as a PDF from your browser. If you need help accessing this Notice, please contact us.

For questions or complaints about our use of your personal information or this Notice, please contact us by:

Email:  privacy@airslate.com

Mail:

airSlate, Inc.

Attention: Privacy Team

17 Station Street, Ste. 303

Brookline, MA 02445

United States