Privacy.

Pdfmark is built around a simple principle: nothing about you is retained after your session ends. No accounts, no profiles, no marketing data, no behavioural tracking across visits. Files live just long enough to do the work, then they go away.

Who runs Pdfmark

Pdfmark is operated by TerraSight Corporation (referred to below as “we”, “us”, or “TerraSight”). For any privacy question, email privacy@terrasightcorp.com.

What we do with the things you upload

The two Pdfmark tools handle files like this:

• In the edit and sign tool, your PDF and any annotations (text, signatures, dates, checkmarks, images) live in a temporary session keyed to a random ID. The session auto-deletes 24 hours after upload. We do not inspect, copy, OCR, or analyse the contents of your files.
• In the send and track tool, the PDF you share lives for 7 days, after which we delete the file and any tracking events (page views, time on page, viewer email) tied to it. Pending uploads that never complete checkout are deleted after 30 minutes.

Deletion is final. Once a session expires we have no copy and no way to recover it.

What we collect, and why

Pdfmark has no sign-up. To make the tools work, the following limited data is processed during a session:

• The PDF you upload, and the annotation actions you take on it.
• For the tracker tool: the email of the person you're sharing with (entered by that recipient when they open the link) and a record of which pages they viewed and for how long. This is used only to build the engagement report we email you 24 hours later.
• Your email address, when you complete a payment via Stripe. We use it to send the share link, first-open notification, and engagement report for the tracker tool, or to send a transactional receipt for the editor.
• Stripe checkout session and payment IDs, retained against your session record for the lifetime of that session, so we can verify payment status.
• Standard server log entries (IP address, user-agent, request path) generated by our hosting provider Vercel. We don't use these for advertising or analytics; they exist to debug errors and stop abuse.

Payments

All payments are processed by Stripe. Card numbers, CVCs, and billing addresses are entered directly on Stripe's checkout page and never touch Pdfmark's servers. We receive only the checkout/payment identifiers, the price paid, and (where you provide it) the email address you give Stripe at checkout. Stripe's own privacy notice governs everything that happens on their side: stripe.com/privacy.

Sub-processors

We use three service providers to operate Pdfmark. Each of them only sees the data necessary for their function and is bound by their own data-protection commitments:

• Vercel Inc. handles hosting and the temporary file storage (Vercel Blob) for the session lifetimes described above.
• Stripe, Inc. processes all payments.
• Resend sends our transactional emails, including share links, first-open notifications, and engagement reports.

We do not share your data with anyone else, and we do not sell data. Pdfmark uses no advertising, analytics, or behavioural tracking services.

Cookies

Pdfmark does not set marketing or analytics cookies. The site uses only strictly necessary technical state to keep an editor or tracker session working in your browser tab; no third-party trackers are loaded.

Your rights

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)and equivalent provincial laws, you have the right to access, correct, or withdraw consent to our processing of personal information we hold about you, and to ask for a meaningful explanation of how it's used. If you're in the UK or EEA, the equivalent rights under the UK GDPR / EU GDPR also apply. Because Pdfmark retains no data about you after your session ends, in practice these requests will only return information for an active session. To exercise any right, email privacy@terrasightcorp.com with enough detail to identify the session in question.

If you believe we've mishandled your data, you have the right to complain to a privacy regulator. In Canada that's the Office of the Privacy Commissioner of Canada. UK residents can complain to the Information Commissioner's Office (ico.org.uk); EEA residents to their national supervisory authority.

International transfers

Pdfmark is operated from Canada. Vercel, Stripe, and Resend may process data in the United States and other regions. Each is contractually bound to provide a level of protection comparable to what would apply if the data remained in Canada. Where required by the UK GDPR or EU GDPR we additionally rely on the European Commission's Standard Contractual Clauses and equivalent UK transfer mechanisms.

Changes to this policy

If we update this policy we'll change the effective date at the top. Because we have no way to email past users (we keep no record of you between sessions), please re-check this page when you next use Pdfmark if it matters to you.

Contact

Privacy questions: privacy@terrasightcorp.com
Everything else: legal@terrasightcorp.com