PDFPivot for Mac

Privacy Policy

Short version: PDFPivot processes documents locally by default and does not send their contents to a PDFPivot server. The optional Claude/Codex connection sends only a document you approve to that provider through your own account. There are no ads. Purchases are handled by our reseller Paddle, so we never receive your full card number.

Who Controls Your Data

PDFPivot for Mac is provided by The Nexus Pivot, trading as Nexus Pivot Max ("we"). Our postal and service address is Nexus Pivot Max, Khanda Colony, New Panvel, Navi Mumbai 410206, Maharashtra, India. For privacy requests, email [email protected] or use the contact form.

Local Processing

PDFPivot for Mac is a local-first application. Rendering, editing, conversion, compression, and export operations run on your Mac. Your documents, annotations, and bookmarks stay on your device, and no telemetry about the contents of your documents is collected.

Files and Storage Access

The app reads the files you choose to open and writes files when you save or export. It does not upload the contents of those files to a PDFPivot server.

Evidence Digest, Local AI, and Model Downloads

Evidence Digest selects source sentences and links them to their pages without a generative model. On eligible Apple-silicon Macs, PDFPivot can download optional local AI: about 3.41 GB on an 8–15 GB Mac or 6.59 GB on a Mac with 16 GB or more. Hugging Face or the Ollama model registry delivers the download and receives ordinary network information such as your IP address, but not your PDF text. PDFPivot checks the download's integrity before using it.

Optional Claude and Codex Processing

If you separately install Claude or Codex, PDFPivot can ask it to create an enhanced summary through your own account. This is off by default. Before the first send, PDFPivot names the provider and asks for permission for that document. The extracted document text leaves the Mac and is processed under that provider's terms and privacy policy; scanned pages are shared as text recovered by OCR. The text does not pass through a PDFPivot server.

Permission is provider-specific and tied to the document text you approved. Editing or replacing the text ends permission unless you explicitly choose to share future edits. You can revoke one document in its AI panel or stop all sharing in Settings › Privacy & AI. While connected access is enabled, PDFPivot keeps a plain-text snapshot in its Application Support folder and removes it when sharing ends or the app quits.

Returned summaries are checked on the Mac against the source. Statements that cannot be verified remain visible and are flagged; verification reduces risk but does not guarantee accuracy or completeness. PDFPivot saves a checked enhanced summary locally so it can be reopened. You can delete saved enhanced summaries in Privacy & AI settings.

Dictation

If you press the microphone button, the app requests microphone and speech-recognition permission and requires Apple's on-device speech recognition. Audio is used to transcribe your command locally and is not uploaded to a PDFPivot server. The feature remains off unless you press the microphone button and grant permission.

Optional Usage Statistics

App usage statistics are off unless you turn them on. If enabled, PDFPivot sends a pseudonymous random Mac identifier, app version, Mac model, and events for app launches, license-screen views, license activations, and completed exports (including whether free-tier branding was added). It never includes document content, file names, file paths, or your license key. You can turn this off immediately in Settings › Privacy & AI. Events are stored in Cloudflare Workers Analytics Engine for three months.

Website Analytics

This website uses a first-party measurement endpoint and no cookies or browser storage for analytics. Unless Global Privacy Control is enabled, it sends a random identifier that lasts only for the current page, the page path without query parameters, the referrer's origin, a timestamp, and click type. The server stores a coarse traffic-source label and country rather than the referrer URL. Cloudflare necessarily processes network information such as the IP address to serve the site. Analytics records are retained for three months and are not used for targeted advertising.

Payments

Purchases are processed by our online reseller and merchant of record, Paddle.com Market Limited. Paddle collects and processes the payment and billing information needed to complete your order and to comply with tax and anti-fraud requirements, under Paddle's own Privacy Policy. We receive order and license information (such as your email address, order reference, country, and license status) so we can deliver your license and provide support. We do not receive your full payment card details.

Licensing

To activate and validate a paid license, the app sends your license key and a pseudonymous device identifier to our licensing service so the license can be tied to your Mac and checked. This is used only to operate licensing and prevent abuse; it does not include document contents and is not used for advertising.

Certificate Checks and Trusted Timestamps

Online certificate-status checks contact the certificate issuer only when you request one. If you enable a trusted timestamp while signing, PDFPivot sends DigiCert's timestamp service a SHA-256 imprint of the certificate signature—not your PDF or its contents—and embeds the authenticated response in the signed copy.

When You Contact Us

If you use the contact form or email us, we receive the details you provide, such as your name, email address, order reference, message, and app version, and use them only to handle your support, billing, privacy, or bug request. Please do not send passwords, private documents, or payment card details.

Service Providers and International Processing

We use Paddle for orders and tax handling, Cloudflare for website/API hosting and first-party analytics, Resend for service email, and GitLab for app-update downloads. Model downloads may be delivered by Hugging Face or the Ollama registry. Certificate and timestamp requests go to the relevant issuer or DigiCert when you invoke them. If you choose Claude or Codex, that provider processes the approved document through your account. These providers may process data in countries outside yours under their own terms and applicable transfer safeguards.

Purposes and Legal Bases

We process license and order data to perform the license contract and prevent abuse; support messages to answer your request; security/update traffic to provide and protect the app; and records required by law for legal compliance. Optional app and website analytics are used to understand product reliability and downloads. Where consent is the applicable basis, you may withdraw it at any time; where legitimate interests are relied on, you may object.

Retention

Website and opt-in app analytics: 90 days.
Raw application security and operational logs, if generated: up to 30 days, unless a specific incident, fraud investigation, or legal claim requires longer retention.
License and activation records: while the license remains active, then up to 24 months after it is closed or revoked, except for transaction records that must be retained by law.
Minimal order, refund, and tax records we receive: up to 72 months from the due date of the relevant annual return, or longer where an authority, dispute, or applicable law requires it. Paddle keeps its own payment records under its policy.
Support correspondence: up to 24 months after the request is closed, or longer while a related dispute or legal obligation remains unresolved.
Data on your Mac: connected-document snapshots last only while sharing is enabled in the running app; saved summaries remain until you delete them or remove the app.

When a period ends, we delete or de-identify the record unless we must keep it to establish, exercise, or defend a legal claim or meet another legal obligation.

Deleting Data

You can uninstall the app to remove app-local history, preferences, and licensing state from your Mac. To request deletion of order or support records held by us, email [email protected] or use Data deletion. Order records held by Paddle are subject to Paddle's own retention and privacy terms.

Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, and complain to your data-protection authority. Submit a request through the contact details above. We do not sell personal information, share it for cross-context behavioural advertising, or use it for decisions with legal or similarly significant effects.

Children

PDFPivot for Mac is not directed to children under 13.

Contact

For privacy questions, use the contact form, email [email protected], or write to Nexus Pivot Max, Khanda Colony, New Panvel, Navi Mumbai 410206, Maharashtra, India.