WebViewPDF

Turn your PDF files into interactive flipbooks

© 2026 WebViewPDF. All rights reserved.

Privacy Policy

Effective: 4 October 2026

1. Controller and scope

WebViewPDF is operated by Igor Menshikov, a self-employed individual in Portugal (“we”). Contact: info@webviewpdf.com. Our address and tax identification are in the Legal Notice. This notice covers our website, accounts, payments, support and flipbook viewers.

We are the controller for account administration, billing, service security and our own website analytics. For personal data in customer PDFs and viewer analytics that we process on a customer's instructions, the customer is the controller and we are the processor. The customer's privacy notice explains their purposes and legal bases; we assist them with data protection requests.

2. Data, purposes and legal bases

  • Account identity, email, credentials and plan settings: creating and operating your account and providing the service, under GDPR Article 6(1)(b).
  • Billing identity, address, tax details, invoices and payment references: performing the contract and meeting tax obligations, under Article 6(1)(b) and (c). Stripe processes card payments; we do not store complete card numbers.
  • Support correspondence: responding to contractual requests under Article 6(1)(b); other enquiries under Article 6(1)(f), our legitimate interest in responding to enquiries.
  • IP address, device information and access logs: delivering and securing the service and preventing abuse, under Article 6(1)(b) for delivery to contracting customers and Article 6(1)(f) for our legitimate interests in secure delivery and preventing abuse.
  • Basic website measurement before consent: loading Google Tag Manager and sending cookieless Google Analytics signals without identifiers (Google Consent Mode), under Article 6(1)(f), our legitimate interest in counting visits to our website.
  • Optional website analytics: measuring website use through Google Analytics cookies, with your consent under Article 6(1)(a).

Providing required account and billing data is necessary to enter into and perform the contract; without them we cannot provide the corresponding service. Optional analytics are not required to use the service. We do not make solely automated decisions producing legal or similarly significant effects on you.

Where you use the service or contact us on behalf of a business customer and are not personally a party to the contract, we process the relevant business contact and account data under Article 6(1)(f), our legitimate interest in managing that business relationship and providing the service to the organisation.

If you choose Google sign-in, we receive your Google account identifier, name, email address and email verification status to create or access your account. We store the identifier for future sign-ins; Google access tokens are not stored. You can disconnect Google in Profile → Security after setting a password, or close your account to remove the connection.

3. PDFs and viewer analytics

PDFs may contain personal data. Customers determine which files to publish, the available access restrictions and the lawful purposes of their viewer analytics. When a flipbook is opened or used, the service processes the viewer's IP address, device information, pages viewed, viewing time and referral source. This supports delivery, security and the publisher's viewing statistics. Where consent is required for viewer analytics or device access, it must be obtained before that processing begins. Customers must provide the necessary notices to viewers and have a lawful basis for publishing personal data.

4. Recipients and international transfers

Relevant data may be accessed by authorised personnel, our hosting provider, payment provider Stripe, Google for requested sign-in, Google Tag Manager and website analytics, providers of email and support services, and professional advisers or public authorities where required by law. Providers receive data needed for their respective services. Stripe also acts as an independent controller for some payment processing; see Stripe's Privacy Policy. Google's processing is described in Google's Privacy Policy.

Our service server and its backups are hosted in the European Union. Stripe and Google also process data internationally, including in the United States; Stripe also identifies India among its processing locations. For eligible certified US recipients, the EU–US Data Privacy Framework provides an adequacy basis. Where not covered by an applicable adequacy decision, transfers by Stripe and Google are subject to the safeguards described in their provider documentation, including EU standard contractual clauses and any necessary supplementary measures. Details are available in Stripe's transfer terms and Google's transfer safeguards. Contact info@webviewpdf.com for information on the transfers applicable to your data and a copy of the safeguards.

5. Retention

  • Account data: while the account is active, then deleted from active systems within 30 days after closure, subject to the legal retention exceptions below.
  • Uploaded PDFs and associated personal viewer analytics: while the relevant file and account remain active; deleted from active systems within 30 days after the customer deletes the PDF or closes the account. Export needed files before closure.
  • Own website analytics: personal Google Analytics events are retained for two months from collection; details are also available in “Cookie settings” before you consent.
  • Identifiable viewer events for active flipbooks: no more than 12 months from collection.
  • Security logs: up to 90 days from creation.
  • Support correspondence: up to 12 months after the enquiry is closed.
  • Backups: deleted within 30 days of creation. Deleted data may remain in an existing backup until it expires; deletion requests are reapplied if a backup is restored.
  • Invoices and supporting tax records: for the 10 subsequent calendar years required by Portuguese tax law, or a longer period specifically required by law.

Data needed for a legal claim may be retained until the applicable limitation period expires or the proceedings end, where necessary. Such exceptions do not authorise continued use for unrelated purposes. Cookie lifetimes are provided through “Cookie settings” as explained below and are distinct from retention of analytics on servers.

6. Your rights

Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. You can withdraw consent at any time without affecting earlier lawful processing. Contact info@webviewpdf.com. For data processed on a customer's instructions, contact the publisher; we will assist or forward your request as appropriate. You may complain to Portugal's CNPD or the competent supervisory authority in your EU country.

7. Cookies and similar technologies

We use cookies and similar browser storage for essential account and session functions, security and remembering your privacy choices. Technologies strictly necessary for a service you request do not require cookie consent. Google Tag Manager loads on our website pages. Until you consent, Google Analytics sets no cookies and sends only cookieless signals without identifiers (Google Consent Mode); Google receives your IP address and browser details when delivering them. Google Analytics cookies are set only after consent. Google may access data collected through those analytics technologies. Stripe's payment interface may use its own security technologies; its privacy information applies to that processing.

Before you make your choice, “Cookie settings” explains the actual storage duration and third-party access for each purpose, including essential browser storage and optional analytics. This information also covers the retention of personal analytics events on servers.

You can accept or reject optional analytics and withdraw consent through “Cookie settings” in the website footer or the viewer's privacy controls. Rejecting optional analytics does not prevent use of the core service. Browser settings can also remove stored cookies. For flipbooks embedded on another website, that website's own technologies are explained by its publisher.

8. Changes

We publish updates with a revised effective date and notify account holders of material changes where appropriate.