Log inGet started

Privacy

Effective date: October 11, 2026

This Privacy Policy explains how Codenova, LLC ("PDFFormly", "we", "us") collects, uses and shares information when you use the PDFFormly website and services at https://pdfformly.com (the "Service"). Questions are welcome at [email protected].

1. Who we are

PDFFormly is operated by Codenova, LLC, 30 N Gould St, STE R, Sheridan, Wyoming 82801, United States. Codenova, LLC is the controller of the personal information described in this policy.

2. Information we collect

Information you give us

  • Account details: your email address and password (stored only as a secure hash), or the name and email address Google shares with us if you sign in with Google.
  • Documents and form content: the answers you type, PDFs you upload, text and drawings you add, and the finished documents you create.
  • Saved details: people and companies you choose to save so they fill in future forms. These can include names, addresses and taxpayer identification numbers you enter.
  • Signatures: signatures you type, draw or upload.
  • Signature and form requests: the names and email addresses of the people you send documents to, your message to them, and what they enter or sign.
  • Support messages: your name, email address and what you write to us.

Information collected automatically

  • Sign-in sessions: IP address, approximate country, browser and device type, and sign-in times, so you can see and end your active sessions and so we can protect accounts.
  • Signing records: when someone opens, signs or declines a document, we record the time, IP address and browser to keep an audit trail of the request.
  • Usage information: pages visited and product events (for example starting a form or completing a purchase), linked to a random identifier stored in your browser.
  • Cookies and similar technologies: see section 6.

Payment information

Payments are processed by Stripe. We do not receive or store your full card number. We receive the plan, amount, payment status and the information Stripe needs to show receipts and manage your subscription.

3. How we use information

  • To provide the Service: save your documents, fill in forms, create PDFs, and send the signature requests, form requests and emails you ask us to send.
  • To process payments and manage subscriptions.
  • To keep the Service secure, prevent fraud and abuse, and enforce our Terms (for example rate limits and sign-up checks).
  • To answer support requests and send service messages such as email verification, receipts and signing notifications.
  • To understand how the Service is used in aggregate and improve it.
  • To comply with legal obligations.

We do not use the content of your documents to train artificial intelligence models.

4. The AI assistant

The optional assistant helps you fill in and edit documents. When you use it, the request you write and the relevant content of the open document are sent to OpenAI to produce a response. OpenAI processes this data as our service provider under its API terms. Do not use the assistant if you do not want that content shared with OpenAI.

5. How we share information

We do not sell your personal information. We share it only as follows:

  • With people you choose: recipients of your signature requests, form requests, emailed PDFs and share links, and members of your team.
  • With service providers that process information on our behalf: DigitalOcean (hosting, database and file storage), Stripe (payments), Resend (email delivery), Google (sign-in with Google and Google Analytics), OpenAI (the AI assistant) and Cloudflare (bot protection on sign-up, when enabled).
  • For legal reasons: when required by law or legal process, or to protect the rights, safety and property of our users, the public or us.
  • In a business transfer: if we are involved in a merger, acquisition or sale of assets, subject to this policy.

6. Cookies, analytics and advertising

We use a cookie to keep you signed in, and browser storage to remember your language, keep guest drafts and hold the random identifier described above. We use Google Analytics to understand how visitors use the Service. We may also use Google Ads to measure how our advertising performs; Google may set cookies for this purpose. Where the law requires consent (for example in the EEA, the UK and Switzerland) these analytics and advertising cookies are used only after you agree, and you can change your choice at any time under Cookie settings at the bottom of every page. You can control Google's use of cookies at Google Ads Settings and opt out of Google Analytics with the Google Analytics opt-out add-on. You can also block or delete cookies in your browser settings, though some features may stop working.

7. How long we keep information

  • Account information and documents are kept while your account is active.
  • Documents you delete stay in Trash for 30 days so you can restore them, and are then permanently deleted.
  • Guest drafts stay in your browser for up to 7 days.
  • When you delete your account, we delete your documents, saved details and signatures, and cancel any subscription.
  • We keep payment and tax records, and the information needed to resolve disputes or enforce our agreements, for as long as the law requires. Stripe keeps its own transaction records.

8. Security

We use encryption in transit (HTTPS), access controls and account protections such as session management. Access to customer content by our staff is limited to support, security and legal needs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your choices and rights

  • You can view and update your account details and saved information in your account settings.
  • You can delete documents at any time and delete your account in Settings.
  • You can ask us for a copy of your personal information, or ask us to correct or delete it, by writing to [email protected]. We will not discriminate against you for exercising these rights.
  • Depending on where you live (for example California, or the EEA and UK), you may have additional rights, including to object to or restrict certain processing and to complain to a data protection authority. We respond within the time required by applicable law.

10. Children

The Service is not directed to children under 13, and you must be at least 18 to create an account or make a purchase. We do not knowingly collect personal information from children.

11. International transfers

We and our service providers process information in the United States and the European Union. Where required, we rely on appropriate safeguards for these transfers.

12. Changes to this policy

We may update this policy. We will post the new version on this page with a new effective date and, for material changes, notify account holders by email or in the Service.

13. Contact

Codenova, LLC
30 N Gould St, STE R
Sheridan, Wyoming 82801
United States
Email: [email protected]