iLovePDF ChatGPT App

1. Purpose and Scope of this Privacy Policy

This Privacy Policy explains how ILOVEPDF, S.L. ("iLovePDF", "we", "us" or "our") processes personal data when you use the iLovePDF application available within ChatGPT (the "App").

This Privacy Policy applies specifically to information transmitted to or generated by iLovePDF when ChatGPT invokes the App to perform a document-processing operation requested by you.

The App connects ChatGPT with iLovePDF's document-processing services through a Model Context Protocol ("MCP") integration operated by iLovePDF.

This Privacy Policy supplements the general iLovePDF Privacy Policy, the iLovePDF Terms and Conditions, the iLovePDF ChatGPT App Terms of Use, and, where applicable, the iLovePDF Data Processing Agreement.

Where this Privacy Policy contains more specific provisions regarding the operation of the App, those provisions apply to the App. The general iLovePDF Privacy Policy continues to apply to matters not specifically addressed here.

This Privacy Policy only describes processing performed by iLovePDF. The processing of personal data by OpenAI in connection with ChatGPT is governed separately by OpenAI's applicable terms and privacy policies.

2. Who is Responsible for Your Personal Data?

The provider of the App is: ILOVEPDF, S.L. CIF B66921552 Calle Sabino de Arana, 60 08028 Barcelona Spain

For personal data that iLovePDF processes for its own purposes in connection with operating, securing and providing the App, iLovePDF acts as the data controller.

However, when you submit a file containing personal data for processing through the App, and you determine the purposes and means of processing that personal data, iLovePDF generally acts as a data processor in relation to the personal data contained in that file.

In such circumstances, iLovePDF processes the personal data contained in the file only to the extent necessary to perform the document-processing operation requested through the App.

Where applicable, the iLovePDF Data Processing Agreement governs this processing.

If you submit files containing personal data relating to another person, you are responsible for ensuring that you are authorized to process that data and to instruct iLovePDF to process it on your behalf.

For privacy-related questions, you may contact us at: privacy@ilovepdf.com

3. What Information Does the App Receive?

The App is designed according to the principle of data minimization. It receives only information reasonably necessary to perform the document-processing operation requested by the user or to securely operate the service.

Depending on the operation requested, iLovePDF may receive the following categories of information from ChatGPT:

3.1 Files submitted for processing

The App may receive one or more files that you have selected or instructed ChatGPT to process using iLovePDF.

These files may include PDF documents or other supported file formats.

The contents of those files may contain personal data if you or another person included such information in the document.

iLovePDF does not require personal data to be present within a document in order to provide its general document-processing functionality.

3.2 File-related information

To process and return files, we may receive or generate limited information about them, such as:

• file name;
• file format or MIME type;
• file size;
• number or order of files where relevant;
• parameters required for the requested operation;
• temporary file or processing identifiers.

This information is used only where necessary to perform, manage or return the requested document-processing operation.

3.3 Instructions relating to the requested operation

ChatGPT may provide iLovePDF with information describing the action requested by the user, such as the document-processing tool to use and the parameters necessary to perform that operation.

The App is not designed to receive your complete ChatGPT conversation history.

iLovePDF only requires the information that ChatGPT makes available to the App and that is necessary to perform the requested operation.

3.4 Technical and operational information

When the App communicates with iLovePDF infrastructure, we may automatically process limited technical information necessary to operate, secure and troubleshoot the service.

This may include:

• date and time of a request;
• requested service or operation;
• request and response status;
• temporary transaction or processing identifiers;
• technical error information;
• security-related information;
• network or connection information made available to iLovePDF as part of the request.

Such information is used for service operation, security, abuse prevention, troubleshooting and compliance purposes.

We do not intentionally return internal logs, authentication credentials, unrelated account information or unnecessary diagnostic data to ChatGPT.

4. Information Returned to ChatGPT

After processing a request, the App returns only information reasonably necessary to provide the requested result.

Depending on the operation, this may include:

• confirmation that the operation succeeded or failed;
• the resulting processed file or a temporary reference that allows the result to be retrieved;
• the name or basic metadata of the resulting file;
• information necessary to identify the requested result;
• relevant processing status information;
• an error message when an operation cannot be completed.

iLovePDF seeks to minimize the information returned by the App and does not intentionally include unrelated user data, internal account data, internal infrastructure information, authentication credentials, detailed internal logs or unrelated diagnostic information in App responses.

5. File Content

iLovePDF processes the contents of files only when and to the extent technically necessary to perform the operation requested by you.

For example, processing a request to compress, convert, merge, split, rotate or otherwise modify a document necessarily requires our systems to technically process the relevant file.

Except where necessary to provide the requested iLovePDF service, we do not access, review, analyze or index the contents of files submitted through the App.

iLovePDF does not use files or their contents submitted through the App to train, improve or develop iLovePDF artificial intelligence models or third-party artificial intelligence models.

We do not sell the contents of your files.

6. Sensitive and Restricted Data

The iLovePDF ChatGPT App is a general-purpose document-processing service. It is not designed to solicit or collect sensitive personal information as an input to its functionality.

In particular, the App does not ask users to provide:

• payment card numbers or payment authentication data;
• protected health information;
• social security numbers or equivalent government identifiers;
• passwords;
• API keys;
• authentication tokens;
• private cryptographic keys;
• MFA codes;
• one-time passwords;
• other authentication secrets.

In accordance with the iLovePDF ChatGPT App Terms of Use, you must not intentionally submit Restricted Data through the App where such processing is not permitted by the applicable platform requirements.

The App does not require any of these categories of information in order to perform ordinary document-processing operations.

Documents can technically contain information that iLovePDF did not request and does not control. Users are responsible for reviewing the documents they choose to submit and for removing unnecessary restricted or sensitive information before submitting them where appropriate.

Where a document contains other categories of personal data, including sensitive or special-category personal data, you are responsible for ensuring that you have a lawful basis and appropriate authority to process that information and to instruct iLovePDF to process it.

When iLovePDF acts as a data processor, it processes such information only on the user's instructions and only to the extent required to provide the requested service.

7. Why We Process Personal Data

Personal data processed through the App may be used for the following purposes.

Providing the requested document-processing service

We process the files, instructions, file metadata and related technical information necessary to perform the operation requested by you and return the result.

Where iLovePDF acts as a controller, the legal basis is generally that the processing is necessary to provide the service requested by the user, in accordance with Article 6(1)(b) of the GDPR.

Where iLovePDF acts as a processor in relation to personal data contained within a document, we process such data on the instructions of the relevant controller.

Security and abuse prevention

We may process limited technical and operational information where necessary to protect the App, users, iLovePDF, OpenAI and third parties against fraud, abuse, malicious files, unauthorized access and other security threats.

Where applicable, this processing is based on iLovePDF's legitimate interest in maintaining the security and integrity of its services under Article 6(1)(f) of the GDPR.

Technical troubleshooting and service reliability

We may process limited request, error and operational information to diagnose failures, maintain availability and ensure that the App functions correctly.

This processing is based on our legitimate interest in maintaining and improving the reliability and security of the service.

Compliance with legal obligations

We may process or retain information where necessary to comply with applicable laws or legally binding requests from competent authorities.

Where applicable, this processing is based on Article 6(1)(c) of the GDPR.

8. What We Do Not Use App Data For

iLovePDF does not use the contents of files submitted through the App:

• to train artificial intelligence models;
• to create advertising profiles;
• to sell personal data;
• to analyze the documents for purposes unrelated to the service requested by the user;
• to make decisions about the user unrelated to the requested document-processing operation.

Using the App does not by itself subscribe you to marketing communications from iLovePDF.

9. How Long Do We Keep Your Files?

Files submitted through the App are temporary.

Unless a specific iLovePDF service expressly provides otherwise, files processed on iLovePDF servers are automatically and permanently deleted from our file-processing systems within two (2) hours after processing.

This temporary retention exists to allow the requested document-processing operation to be completed and the resulting file to be made available.

iLovePDF does not retain a permanent copy of the documents submitted through the App as part of the ordinary document-processing workflow.

The two-hour deletion period applies to the uploaded and processed document files.

It does not necessarily apply to limited technical or security records that do not contain the document itself.

10. Retention of Technical Information

Limited operational, security and legal records may be retained for longer than the document itself where necessary for:

• security;
• abuse and fraud prevention;
• service reliability;
• troubleshooting;
• enforcement of applicable terms;
• compliance with legal obligations.

Such information is retained only for as long as reasonably necessary for the relevant purpose and in accordance with the retention principles described in the general iLovePDF Privacy Policy.

Where retention is required by applicable law, information may be retained or blocked for the legally required period and subsequently deleted.

11. Does iLovePDF Share App Data With Third Parties?

iLovePDF does not sell your personal data.

We may make personal data available to third parties only where necessary for legitimate purposes described in this Privacy Policy and the general iLovePDF Privacy Policy.

This may include:

Service providers

We may use infrastructure, hosting, security and other service providers acting on behalf of iLovePDF.

Where these providers process personal data for iLovePDF, they are required to process that information only as necessary to provide their services and subject to applicable contractual and data-protection requirements.

Legal requirements

We may disclose information where required to comply with a valid legal obligation, court order or request from a competent authority.

Corporate transactions

Information may be transferred where necessary as part of a merger, acquisition, corporate restructuring or similar transaction, subject to applicable legal requirements.

12. Relationship With OpenAI

The App operates within ChatGPT.

When you ask ChatGPT to use iLovePDF, OpenAI may transmit the information necessary to invoke the App and perform the operation you requested.

After processing, iLovePDF returns the requested result and the limited information necessary to provide that result to ChatGPT.

OpenAI operates ChatGPT independently from iLovePDF.

iLovePDF does not determine how OpenAI processes information before it is transmitted to the App or after information is returned by the App.

Any information independently processed by OpenAI is subject to OpenAI's own applicable privacy policies and terms.

Users should therefore review both this Privacy Policy and the applicable OpenAI privacy information when using the App.

13. International Data Transfers

As a general rule, and except where a user has selected otherwise, iLovePDF processes personal data within the European Economic Area (EEA).

For users located outside the EEA, iLovePDF may use infrastructure in other geographic areas where appropriate to improve the performance and efficiency of its services.

Where personal data is transferred outside the EEA, iLovePDF applies the safeguards required by applicable data-protection legislation.

Where appropriate, this may include:

• processing in countries subject to a European Commission adequacy decision;
• Standard Contractual Clauses approved by the European Commission and other applicable safeguards.

Further information about international transfers is available in the general iLovePDF Privacy Policy or by contacting privacy@ilovepdf.com.

14. Security

iLovePDF implements technical and organizational measures designed to protect files and personal information processed through its services.

Files transmitted to and from iLovePDF online services are protected using secure HTTPS connections.

iLovePDF maintains an information-security management framework and is certified according to ISO/IEC 27001.

However, no internet-based transmission or information system can be guaranteed to be completely secure. Users should therefore avoid submitting information that is not necessary for the requested document-processing operation.

15. Data Minimization

The App is designed to follow the principle of data minimization.

This means that iLovePDF seeks to:

• receive only the information necessary to perform the requested operation;
• process file contents only where technically required;
• return only information necessary to provide the requested result;
• avoid exposing internal or unrelated user information through tool responses;
• retain documents only temporarily;
• avoid collecting personal information merely because it might be available from ChatGPT.

The App is a document-processing integration and is not intended to function as a tool for collecting personal profiles or obtaining information about ChatGPT users.

16. Your Data Protection Rights

Subject to the conditions established by applicable law, including the GDPR and Spanish Organic Law 3/2018, you may have the right to request:

• access to your personal data;
• rectification of inaccurate personal data;
• deletion of your personal data;
• restriction of processing;
• objection to processing;
• portability of your personal data;
• withdrawal of consent where processing is based on consent.

You may exercise your rights by contacting: privacy@ilovepdf.com

Please note that where iLovePDF acts exclusively as a data processor on behalf of another organization, we may be required to refer the request to or cooperate with the relevant data controller.

You also have the right to lodge a complaint with the competent data-protection authority.

In Spain, the supervisory authority is the Agencia Española de Protección de Datos (AEPD).

17. Data Protection Officer

iLovePDF has appointed a Data Protection Officer ("DPO").

The DPO can be contacted regarding any matter concerning the processing of personal data: Carlos Tortajada Email: privacy@ilovepdf.com Postal address: Calle Sabino de Arana, 60 08028 Barcelona Spain

18. Children and Minors

The App is not specifically directed at children.

Where minors use iLovePDF services, their use must take place under the supervision or authorization required by applicable law, including, where relevant, supervision by a parent, legal guardian or educational institution.

Users should not submit documents containing personal data relating to minors unless they have the appropriate authority and lawful basis to do so.

19. Data Processing Agreement

Where you use the App on behalf of a company, organization or other entity and iLovePDF processes personal data contained within your documents on your behalf, the iLovePDF Data Processing Agreement may apply.

Under those circumstances, the organization using the App may act as data controller and iLovePDF as data processor.

The Data Processing Agreement forms part of the applicable iLovePDF contractual framework and describes the obligations applicable to such processing under the GDPR.

20. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to:

• the App;
• the iLovePDF services;
• ChatGPT or the technical integration with OpenAI;
• applicable platform requirements;
• our security practices;
• applicable laws and regulations.

The date shown at the beginning of this Privacy Policy identifies the latest revision.

Where required by applicable law, we will provide appropriate notice of material changes.

21. Contact Us

For questions regarding this Privacy Policy, the App or the processing of personal data by iLovePDF, please contact:

ILOVEPDF, S.L. CIF B66921552 Calle Sabino de Arana, 60 08028 Barcelona Spain

Privacy and Data Protection: privacy@ilovepdf.com

For general enquiries: info@ilovepdf.com

22. Related Policies

This Privacy Policy should be read together with:

• the iLovePDF ChatGPT App Terms of Use;
• the iLovePDF Privacy Policy;
• the iLovePDF Terms and Conditions;
• where applicable, the iLovePDF Data Processing Agreement.

In relation to personal data processing specifically performed through the iLovePDF ChatGPT App, this Privacy Policy provides the specific information applicable to the App.

For other iLovePDF services and processing activities, the general iLovePDF Privacy Policy applies.