Privacy Policy
Last updated: June 2, 2026
ZumFile ("we", "us") operates ZumFile (https://zumfile.com), a suite of free browser-based tools. This policy explains what data we process, your rights under the GDPR and similar laws, and how to contact us.
1. Data controller
ZumFile. Email: privacy@zumfile.com
2. Local processing (core tools)
PDF, image, and document tools run in your web browser. Files you select are processed on your device using client-side libraries. We do not receive your file contents for standard tool operations unless you explicitly contact support with an attachment.
This design supports data minimization under GDPR Article 5 and reduces the risk of unauthorized access to your documents.
3. Analytics
We may use Google Analytics 4 (GA4) to understand aggregate usage (pages visited, tool events, approximate geography). GA4 uses cookies or similar technologies when enabled. You can limit tracking via our Cookie Policy, browser settings, or opt-out tools provided by Google.
Legal basis: legitimate interest in improving our services, balanced against your privacy. Where consent is required, we request it before non-essential cookies load.
4. Legal bases for processing
- Contract / service: providing the tools you request
- Legitimate interest: security, analytics, product improvement
- Consent: optional marketing or non-essential cookies
- Legal obligation: responding to lawful requests
5. Retention
We do not store uploaded documents from browser tools. Server logs and analytics data are retained only as long as needed for operations and reporting, typically up to 26 months for GA4 unless a shorter period is configured.
6. Your rights (GDPR)
- Access — request a copy of personal data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion where applicable
- Restriction — limit processing in certain cases
- Portability — receive data in a machine-readable format
- Object — object to processing based on legitimate interest
- Withdraw consent — where processing is consent-based, without affecting prior lawful processing
- Lodge a complaint with your supervisory authority (e.g. EU member state DPA)
7. International transfers
Analytics providers may process data in the United States or other countries. We rely on appropriate safeguards (such as Standard Contractual Clauses) where required by law.
8. Children
Our services are not directed at children under 16. We do not knowingly collect personal data from children.
9. Changes
We may update this policy. Material changes will be reflected with a new "Last updated" date. Continued use after changes constitutes acceptance where permitted by law.
10. Contact
Privacy inquiries: privacy@zumfile.com. Support: support@zumfile.com