PDF Tools — https://cmcopys.com/pdftools.php
Last Updated: 26 June 2026Under the Digital Personal Data Protection Act, 2023, CM Copys is the Data Fiduciary for personal data processed through our PDF Tools. A Data Fiduciary is the entity that determines the purpose and means of processing personal data.
Entity Name: CM Copys (Sole Proprietorship)
Founder: Anil Kumar H
Address: CM Copys, Bikasipura, Bengaluru, Karnataka – 560085, India
Privacy Contact: privacy@cmcopys.com
This Privacy Policy applies specifically to the CMCopys PDF Tools available at https://cmcopys.com/pdftools.php, including all tools: Merge PDF, Split PDF, JPG to PDF, PDF to JPG, PDF to Word, Compress PDF, Rotate PDF, Unlock PDF, Protect PDF, and Watermark PDF.
This policy covers data collected:
For data collected across the broader CMCopys platform (print orders, notes marketplace), please refer to our General Privacy Policy.
| Data Type | Details | Purpose |
|---|---|---|
| IP Address | Approximate location, not exact | Security, abuse prevention, rate limiting |
| Browser & Device Info | User agent, browser type, OS | Compatibility & performance optimisation |
| Usage Logs | Pages visited, tools used, timestamps | Service analytics, debugging |
| Referrer URL | Source page that led you here | SEO & traffic analysis |
When you upload a file for processing, we temporarily receive and store the file on our servers to perform the requested conversion or editing operation. We do not read, analyse, or extract data from your files for any purpose other than performing the requested operation.
| Data Type | Retention | Purpose |
|---|---|---|
| Uploaded File (PDF/image/doc) | Deleted within 2 hours | Processing only |
| Processed/Output File | Deleted within 2 hours | Available for download only |
| File Metadata (name, size, type) | Deleted within 2 hours | Processing & logging |
We use minimal, essential cookies. See Section 7 for details.
Under the DPDP Act 2023, we must have a lawful basis ("consent" or "legitimate use") for processing personal data. The table below sets out each processing activity, its purpose, and our legal basis:
| Processing Activity | Purpose | Legal Basis (DPDP Act 2023) |
|---|---|---|
| Uploading & processing your files | To deliver the requested PDF tool service | §7(a) — Performance of a contract / fulfilment of user's voluntary request |
| Server & access logs | Security monitoring, abuse prevention | §7(d) — Legitimate interest (security) |
| Analytics (page views, tool usage) | Service improvement, SEO | §7(d) — Legitimate interest |
| Responding to grievances / support emails | Customer support & legal compliance | §7(b) — Legal obligation & legitimate interest |
| Compliance with law enforcement requests | Legal obligation | §7(b) — Compliance with Indian law |
We do not use your data for advertising profiling, targeted marketing, or automated decision-making that significantly affects you.
Files are processed on servers located in India and/or on cloud infrastructure with data centres in India. In some cases, cloud processing may involve servers in other jurisdictions (see Section 12 for cross-border transfer details).
All Uploaded Files and Processed Files are permanently and automatically deleted within 2 hours of upload. We do not maintain backups of your files beyond this window.
CMCopys does not sell, rent, or commercially share your personal data or uploaded files with any third party.
| Recipient | Data Shared | Reason |
|---|---|---|
| Cloud / Hosting Providers | Uploaded files (temporarily, for processing) | Infrastructure necessary to run the service. Bound by data processing agreements. |
| Analytics Providers (e.g., Google Analytics) | Anonymised usage data, IP (anonymised) | Service performance & SEO insights. No file content. |
| Law Enforcement / Courts | As required by law | Compliance with valid Indian court orders, CERT-In directions, or law enforcement requests under IT Act 2000. |
| Successors in Business | Aggregated, anonymised data only | In the event of a business acquisition or merger. |
Where we engage third-party processors (e.g., cloud providers), we ensure they are bound by contractual obligations consistent with the DPDP Act 2023 and maintain equivalent security standards.
| Cookie Type | Name / Provider | Purpose | Duration |
|---|---|---|---|
| Essential | Session cookie (cmcopys.com) | Maintain tool session state, CSRF protection | Session (deleted on browser close) |
| Analytics | _ga, _gid (Google Analytics) | Anonymised usage statistics | Up to 2 years |
| Preference | lang_pref (cmcopys.com) | Remember language preference | 30 days |
You can control and delete cookies through your browser settings. Disabling analytics cookies will not affect the functionality of the PDF Tools. Essential cookies cannot be disabled without disrupting the service.
We do not use tracking pixels, fingerprinting technologies, or third-party advertising cookies on the PDF Tools page.
We implement reasonable security practices and procedures as mandated under Section 43A of the IT Act 2000 and the DPDP Act 2023, including:
Despite these measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security. In the event of a data breach that is likely to result in harm to a Data Principal, we will notify affected users and the Data Protection Board of India as required under the DPDP Act 2023.
| Data Category | Retention Period | Reason |
|---|---|---|
| Uploaded Files | Maximum 2 hours | Processing only; auto-deleted |
| Processed / Output Files | Maximum 2 hours | Download window; auto-deleted |
| Server Access Logs (IP, timestamps) | 90 days | Security monitoring; then anonymised or deleted |
| Analytics Data | Up to 26 months (anonymised) | Service improvement |
| Grievance / Support Emails | 3 years | Legal compliance & dispute resolution |
| Legal / Regulatory Records | As required by law (min. 5 years) | Compliance with IT Rules 2021 & applicable law |
Personal data is not retained longer than necessary for the purpose for which it was collected, in accordance with the DPDP Act 2023.
As a Data Principal (individual whose personal data is processed), you have the following rights under the Digital Personal Data Protection Act, 2023:
Request a summary of personal data we hold about you and how it is being processed.
Request correction of inaccurate or incomplete personal data we hold.
Request deletion of your personal data where it is no longer needed for the original purpose.
Withdraw consent for data processing at any time. This does not affect past processing.
Raise a complaint with our Grievance Officer and escalate to the Data Protection Board of India.
Nominate another individual to exercise your rights in the event of death or incapacity.
To exercise any of the above rights, please email privacy@cmcopys.com with:
We will respond within 30 days of receiving a valid request.
The PDF Tools are not directed at children under the age of 18. We do not knowingly collect personal data from children.
Under Section 9 of the DPDP Act 2023, where a child's personal data is processed, verifiable parental or guardian consent is required. If you believe a child has used our service without proper consent, please contact us immediately at privacy@cmcopys.com and we will take steps to delete such data.
Our PDF Tools do not serve behavioural advertising or tracking to any user, let alone children.
CMCopys primarily processes data on servers located in India. However, certain cloud services we use (such as content delivery networks or analytics platforms) may involve processing in countries other than India.
Any cross-border transfer of personal data is carried out in accordance with Section 16 of the DPDP Act 2023 and any applicable rules or notifications issued by the Government of India regarding permissible countries for data transfer.
We ensure that any international recipients of personal data are bound by contractual terms providing equivalent levels of data protection.
In accordance with Rule 3(2)(b) of the IT (Intermediary Guidelines) Rules, 2021 and the DPDP Act 2023, we have designated a Grievance Officer / Data Protection Officer:
Name: Anil Kumar H
Role: Founder & CEO, CM Copys
Email: grievance@cmcopys.com
Privacy Email: privacy@cmcopys.com
Address: CM Copys, Bikasipura, Bengaluru, Karnataka – 560085, India
Working Hours: Monday to Saturday, 10:00 AM – 6:00 PM IST
Acknowledgement: Within 24 hours of receipt
Resolution: Within 15 days of acknowledgement
If you are not satisfied with our response to your grievance, you may escalate your complaint to the Data Protection Board of India once it is constituted under the DPDP Act 2023. We will update this section with the Board's contact details upon its establishment.
For consumer complaints, you may also approach the National Consumer Helpline at 1800-11-4000 (toll-free) or file a complaint at consumerhelpline.gov.in under the Consumer Protection Act, 2019.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will:
We encourage you to review this Privacy Policy periodically. Continued use of the PDF Tools after any changes constitutes acceptance of the revised policy.
The current version of this Policy, effective from 26 June 2026, supersedes all previous versions.
CM Copys
📍 CM Copys, Bikasipura, Bengaluru, Karnataka – 560085, India
📧 Privacy: privacy@cmcopys.com
📧 Grievance: grievance@cmcopys.com
Also see: Terms & Conditions – PDF Tools | Back to PDF Tools