Privacy Policy

1. Introduction

OffByThree LLC ("Company", "we", "us", or "our") operates the Whipdoc PDF compression API service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and password (stored in hashed form). If you sign up via OAuth, we receive your name and email from the authentication provider.

Usage Data

We automatically collect information about your use of the Service, including API call timestamps, request counts, and general usage patterns. This helps us improve the Service and enforce usage limits.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card numbers. Stripe's privacy policy governs their handling of your payment information.

3. How We Handle Your Files

Your privacy is paramount. When you upload PDFs for compression:

• Files are processed in memory and not stored permanently
• We do not access, read, or analyze the contents of your files
• Compressed files are automatically deleted after processing
• We do not use your files for training, analytics, or any other purpose
• All file transfers are encrypted using TLS

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send technical notices and support messages
• Respond to your comments and questions
• Monitor and analyze usage patterns
• Detect and prevent fraud and abuse

5. Information Sharing

We do not sell your personal information. We may share information with:

• Service Providers: Third parties that help us operate the Service (e.g., Stripe for payments, hosting providers)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit and at rest, secure API key handling, and regular security assessments. However, no method of transmission over the Internet is 100% secure. If you discover a security vulnerability, please report it to security@offbythree.com.

7. Data Retention

We retain your account information for as long as your account is active. Usage logs are retained for up to 90 days. You may request deletion of your account and associated data at any time.

8. Your Rights

Depending on your location, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict certain processing
• Data portability
• Withdraw consent where applicable

To exercise these rights, please contact us using the information below.

9. Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics services to understand how users interact with the Service. You can control cookie preferences through your browser settings.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable law.

11. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@offbythree.com.