Privacy Policy
Your documents never leave your Mac. Merging, organizing, signing, compressing, editing and converting happen on your machine. PDFPack does not send a document, a file name, a thumbnail or a digital certificate to any server, not even ours.
Who we are
PDFPack is made by The Bunker Desenvolvimento e Tecnologia LTDA, a Brazilian company. For anything about this policy, write to support@pdfpack.app.
What the website records
We measure traffic with Umami, running on our own servers. No cookies, no third-party trackers, no ads. What gets recorded:
- The page viewed and where the visit came from.
- Country and city, derived from the IP at the time of the visit. The IP is not stored.
- The browser type.
Clicks on "Download" are counted in aggregate: day, version, language and source channel (sanitized utm_source). No personal identifier.
When you buy or subscribe
Checkout and recurring billing are handled by Stripe. Your card details go straight to Stripe and never pass through our server. What we keep:
- Your email.
- The order data: plan, amounts, currency and status.
- For subscriptions: its Stripe identifier, its status (active, cancelled…) and when the paid period ends.
- The license issued.
Transactional emails (the key, key recovery, the verification code) are sent through Resend. We have no newsletter and send no marketing.
What the app sends
Your documents and certificates, never. The app only talks to our server for licensing:
- When the 15-day trial starts and when you activate a license: a machine identifier (an opaque code derived from the hardware that reveals nothing about you), the machine name, the system and app versions and, on activation, the license key.
- Once activated, a background revalidation at most every 12 hours with the same data — that is how a subscription renewal reaches the app.
- When you ask to manage the subscription, the key, to open the Stripe portal.
Without a network the app keeps working: revalidation waits for the next connection and nothing is blocked because of it.
On launch the app asks our server whether there is an update (via Sparkle). We count launches in aggregate, per day and version, with no identifier.
Your rights
Brazil’s data protection law (LGPD) guarantees you access, correction and deletion of your data. Just ask at support@pdfpack.app.
If you ask us to delete your license data, we can no longer support your key.
Retention: we keep the data while the license exists, and whatever tax law requires about sales invoices, for as long as it requires.
Where the data lives
On our own servers, rented from a hosting provider. Stripe (payment and subscription) and Resend (email) act as processors: each sees only what it needs to do its part.
Last updated: 19 September 2026. If anything changes, the new version is published on this page.

