Privacy

Your spreadsheet and the PDFs it becomes never leave your computer. Not "no data" — some things are on our server, and they're listed below. But the rows about your clients aren't among them, and never will be. Here's the precise boundary.

What never leaves your computer

All of this is read, processed, and rendered to PDF entirely in your browser. There's no upload step, and no server-side feature that could receive it. You can check rather than take our word for it: open your browser's network tools and generate a batch — nothing goes out.

This is the part we care most about being exact on. Those rows are names, amounts, addresses and tax codes belonging to your clients: the part you answer for, and the part it isn't ours to hold. It's also the bulk of it — three hundred rows against one template.

What's on our server

Only if you sign in. Everything else — loading a sheet, writing or importing a template, generating the PDFs — works without an account, and then nothing here applies to you.

Saved templates are encrypted in the database, column by column, with a key the application holds outside it. A stolen copy of the database is unreadable without that key. We can still read them, and you should know that: this protects you from a leaked dump or a backup left somewhere it shouldn't be, not from us. If that matters for a particular document, don't save it here — everything still works without saving.

Payment

Card payments are processed by Stripe. Your card details go to them and never through us: we're told whether a subscription is active, and nothing more. The seller is us, not Stripe, so the receipt and any refund come from boolkpdf.

Analytics

We count how the app is used, with Umami, a third-party service. It sets no cookies and doesn't follow you across other websites. What it records is the page you're on, where you arrived from, your language and screen size, and a handful of things we count deliberately: that a spreadsheet was loaded and how many rows it had, that a template was started and whether it came from Word, that a batch was generated, that the price was shown.

None of it carries anything of yours. Not the file's name, not your column names, not what you wrote in a template, not your email — numbers and a fixed list of words, nothing else. Your spreadsheet is never read by it, because it's never read by anything outside your browser.

Deleting things

A saved template is deleted from the database when you delete it. If you want the account itself and everything in it gone, write to the address below and it will be — there's no copy kept elsewhere for us to forget about.

Questions

hello@boolkpdf.com.