Privacy Policy

Last updated: 29 October 2026. FillDeck PDF Creator ("FillDeck") is operated by Elektro Team — a sole proprietorship (JDG) with its seat in Gdańsk, Poland, NIP: 5851421589. Contact: filldeck@sitegrade.org (forwarded to the operator's business mailbox, replies within 30 days) or via your Etsy/Gumroad purchase messages.

1. What we process

• Documents you upload (PDF files) — processed only to render a preview and inject the form fields you draw, and to produce your exported file.
• Email address — only if you voluntarily submit it in the editor (to continue past the free field limit, or to purchase Pro).
• Basic technical logs — server logs (timestamps, requests) retained for security and error diagnosis, max 30 days.
• Payment data — handled exclusively by Stripe Payments Europe Ltd. ("Stripe") as merchant/independent controller for subscriptions and one-time purchases. We never see or store your card details; we receive only a payment confirmation and your email for receipt/licensing purposes.

2. What happens to your uploaded PDFs

• Uploads are stored temporarily on our server only for the length of your editing session.
• They are deleted automatically right after you export the finished file.
• If you upload and never export, the copy and its rendered previews are deleted automatically no later than 2 hours after upload.
• We do not view, copy, share, sell, or train anything on your documents. We do not use them for marketing.
• Backups: uploaded documents are excluded from server backups by design — deletion is real.

3. Legal bases (GDPR)

• Document processing and export — performance of a contract / provisioning the service you requested (Art. 6(1)(b)).
• Email capture — your consent, given when you submit the form (Art. 6(1)(a)); you can withdraw it any time by asking us to delete your entry.
• Server logs — our legitimate interest in operating a secure service (Art. 6(1)(f)).

4. Your rights

You have the right to access, rectify, erase, restrict or object to processing, and data portability. Because uploaded documents are short-lived and auto-deleted, most requests concern your email address and payment records. Write to us via your Etsy/Gumroad purchase messages (fastest, checked daily) and we will respond within 30 days. You may also lodge a complaint with your local data protection authority (in Poland: UODO, uodo.gov.pl).

5. Data sharing

We share only what is necessary: Stripe (payments — its own privacy policy: stripe.com/privacy), and our hosting/VPS provider (server infrastructure, EU). We do not sell data to anyone.

6. Cookies and local storage

No analytical/advertising cookies, no third-party trackers. The editor uses your browser's local storage only to remember free-tier counters (documents/fields) and whether you submitted an email — this stays on your device and is never sent to us unless you submit the form.

7. Children

The service is not directed to children under 16; we do not knowingly process their personal data.

8. Changes

Material changes will be announced on the site home page for 14 days before taking effect.