Privacy Policy
Last updated: April 2026
This policy explains how Mapsoft Computer Services Limited ("we", "us", "our") collects, uses, and protects your personal data when you use the Mapsoft PDF Hub service at pdf.mapsoft.com, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller
The data controller responsible for your personal data is:
Mapsoft Computer Services Limited
Email: support@mapsoft.com
Website: mapsoft.com
2. Data We Collect
Account Information
When you register for an account, we collect:
- Name (first and last)
- Email address
- Company name (optional)
- Password (stored securely using one-way hashing)
Usage Data
When you use our PDF tools, we record:
- Which operations you performed (e.g., "merge", "compress")
- Input and output file names (not file contents)
- Timestamps of operations
Uploaded Files
Files you upload for processing are stored temporarily on our servers only for the duration needed to complete the requested operation. Processed files are made available for download and are automatically deleted within 24 hours for free accounts, or 7 days for Super User and Developer subscribers. We do not read, analyse, or share the content of your files beyond what is necessary to perform the requested PDF operation.
Payment Data
Subscription payments are processed by FastSpring, our third-party payment processor. We do not store your credit card details. FastSpring's privacy policy applies to payment data: fastspring.com/privacy.
3. Legal Basis for Processing
We process your data under the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Providing the PDF processing service | Performance of a contract (your use of our service) |
| Account management and authentication | Performance of a contract |
| Analytics (Google Analytics) | Consent (via cookie banner) |
| Responding to support tickets | Performance of a contract / Legitimate interest |
| Sending service-related emails | Legitimate interest (service operation) |
4. Cookies
We use the following cookies:
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
.AspNetCore.Identity.Application | Essential | Keeps you logged in | Session / 30 days (if "Remember me") |
.AspNetCore.Antiforgery.* | Essential | Prevents cross-site request forgery | Session |
mapsoft_cookie_consent | Essential | Stores your cookie preferences (shared across mapsoft.com and pdf.mapsoft.com) | 1 year |
_ga, _ga_* | Analytics | Google Analytics — page views and usage patterns | Up to 2 years |
Analytics cookies are only set if you click "Accept All" on our cookie consent banner. Your consent choice is shared across mapsoft.com and pdf.mapsoft.com. You can change your preference at any time on our Cookie Policy page.
5. Third-Party Services
We share data with the following third parties, only as necessary to provide the service:
- Google Analytics — anonymised usage analytics (only with your consent). Google Privacy Policy
- FastSpring — payment processing for subscriptions. FastSpring Privacy Policy
- Dropbox / Google Drive — if you choose to import files from cloud storage, we access only the specific files you select. We do not store your cloud storage credentials.
We do not sell your personal data to any third party.
6. Data Retention
| Data | Retention Period |
|---|---|
| Uploaded and processed files | Automatically deleted within 24 hours (free accounts) or 7 days (Super User / Developer) |
| File operation history | Retained while your account is active; deleted on account deletion |
| Account information | Retained while your account is active; deleted on account deletion |
| Support tickets | Retained for up to 2 years after resolution for quality assurance |
| Analytics data | Retained by Google for up to 26 months |
7. Your Rights
Under UK GDPR, you have the following rights:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — correct inaccurate data via your profile settings.
- Right to erasure — delete your account and all associated data from your profile page.
- Right to restrict processing — request that we limit how we use your data.
- Right to data portability — request your data in a machine-readable format.
- Right to object — object to processing based on legitimate interest.
- Right to withdraw consent — withdraw cookie consent at any time by clearing cookies or rejecting via the banner.
To exercise any of these rights, email us at support@mapsoft.com. We will respond within 30 days.
8. Data Security
We protect your data through:
- HTTPS encryption for all data in transit
- Secure, HttpOnly, SameSite=Strict cookies for authentication
- One-way password hashing (ASP.NET Identity)
- Automatic deletion of uploaded files after processing
- Role-based access controls for administrative functions
9. Children's Privacy
Our service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via a notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised.
11. Contact & Complaints
If you have questions about this policy or wish to exercise your rights, contact us at:
support@mapsoft.com
If you are not satisfied with our response, you have the right to lodge a complaint with the
Information Commissioner's Office (ICO):
ico.org.uk/make-a-complaint