Privacy Policy

This Privacy Policy describes the policies and procedures of Vue PDF Viewer ("Company", "We", "Us", or "Our") on the collection, use, storage, and disclosure of Your information when You use the Service. It also tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide, maintain, and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

This Privacy Policy should be read in conjunction with the Terms and Conditions (https://www.vue-pdf-viewer.dev/terms-and-conditions) and the End User License Agreement (https://www.vue-pdf-viewer.dev/license-agreement), which together form the complete agreement between You and the Company.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service or parts of our Service.
• Affiliate  means an entity that controls, is controlled by or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
• Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to Vue PDF Viewer.
• Country  refers to: Singapore
• Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
• Personal Data  is any information that relates to an identified or identifiable individual.
• Service  refers to the Website.
• Service Provider   means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
• Software  refers to the Vue PDF Viewer software component, as described in the End User License Agreement.
• Usage Data  refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
• Website  refers to Vue PDF Viewer, accessible from https://www.vue-pdf-viewer.dev/
• You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

• Email Address
• Position (collected during onboarding)
• Usage Data

Account and Authentication Data

When You purchase a License or when an Account is created on Your behalf, We collect and store the following data related to Your Account:

(b) Your password, which is stored only in hashed form by Our authentication Service Provider (Supabase). We do not store Your password directly and cannot retrieve it.

Our authentication Service Provider, Supabase, may additionally process and store data related to Your login activity, including session tokens and IP addresses, in accordance with its own infrastructure and security practices. For further information, please refer to Supabase's privacy policy at https://supabase.com/privacy.

License Data

When You purchase a License and manage it through the Service, We collect and store:

(a) License Key records, including the keys generated for Your account and the domains or environments they are associated with;

(b) License type and tier information;

(c) Purchase date and support period expiry date.

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

Lawful Basis for Processing

We process Your Personal Data on the following legal bases, as applicable under the Personal Data Protection Act 2012 of Singapore (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR):

• Contractual Necessity We process Your email address, hashed password, account data, and license data because it is necessary to perform Our contract with You, specifically, to create and maintain Your Account, deliver the Software, manage Your License Keys, and provide support services during Your active support period.
• Legitimate Interest We process Usage Data, login timestamps, IP addresses, failed login attempts, and analytics data (via PostHog) for Our legitimate interest in maintaining the security of the Service, preventing fraud, understanding how the Service is used, and improving the Service. These interests are balanced against Your rights and do not override them.
• Consent We process Your data for promotional email communications only with Your consent. You may withdraw this consent at any time (see Email Communications section below).
• Legal Obligation We may process and retain certain data where required to comply with applicable law, including tax, accounting, and regulatory obligations.

Processing of Your Personal Data

The Service Providers We use may have access to Your Personal Data. These third-party vendors collect, store, use, process and transfer information about Your activity on Our Service in accordance with their Privacy Policies.

• PostHog: We use PostHog, Inc. ("PostHog") for product analytics to understand how users interact with Our Service. PostHog collects Usage Data including page visits, interaction patterns, device information, and user activity within the Service. This may include anonymized recordings of how users navigate and interact with the Service, used solely to identify usability issues and improve the user experience. No passwords or sensitive form inputs are captured. For further information, please refer to PostHog's privacy policy at  https://posthog.com/privacy.
• Brevo: We use Brevo for email communication services. Brevo processes Your email address and name for the purpose of sending transactional emails (such as license delivery, password reset, and support period notifications) and, where You have consented, promotional emails. Brevo's privacy policy is available at  https://www.brevo.com/legal/privacypolicy/.
• Stripe: We use Stripe, Inc. ("Stripe") for payment processing and subscription management. Stripe processes personal data in connection with payments made through our Service. For further information on Stripe's privacy practices, please visit:  https://www.stripe.com/privacy.
• Supabase: We use Supabase, Inc. ("Supabase") for user authentication and account management. Supabase processes Your email address, hashed password, and authentication-related data (including session tokens and login activity) on its cloud infrastructure. Supabase's privacy policy is available at  https://supabase.com/privacy.

Email Communications

We send the following types of emails:

• Transactional Emails: These are essential communications related to Your Account and License, including license key delivery, password reset links, account security notifications, and support period expiry reminders. These emails are necessary for the performance of Our contract with You and cannot be opted out of while Your Account is active.
• Promotional Emails: These include product updates, feature announcements, and offers. You may opt out of promotional emails at any time by clicking the unsubscribe link included in every promotional email, or by contacting Us at  support@vue-pdf-viewer.dev. Opting out of promotional emails will not affect Your receipt of transactional emails.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service: including to create and manage Your Account, process License purchases, generate and manage License Keys, and monitor the usage of Our Service.
• For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.
• To manage Your Account: To manage Your registration, Account security, and access to the Service. Your Account provides access to License Key management, support services, and Software downloads.
• To manage Your requests: To attend and manage Your requests to Us.
• For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Service users is among the assets transferred.
• For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.

We may share Your personal information in the following situations:

• With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to contact You.
• For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
• With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with Us.
• With business partners: We may share Your information with Our business partners to offer You certain products, services or promotions.
• With Your consent: We may disclose Your personal information for any other purpose with Your consent.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy and as required by applicable law. Specifically:

(a) Account information (email address, hashed password via Supabase) is retained for the duration of Your active Account and deleted within thirty (30) days of Account deletion, unless retention is required by law;

(b) Transaction and license records (purchase history, License Key records, invoices) may be retained for up to seven (7) years for accounting, tax, and legal compliance purposes;

(c) Server logs containing login timestamps and IP addresses are retained for a reasonable period for security and fraud prevention purposes;

(d) Usage Data collected via PostHog is retained in accordance with PostHog's data retention policies; and

(e) In the event of a dispute or legal proceeding, relevant data may be retained until the matter is fully resolved.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and by Our Service Providers. This means that Your data may be transferred to and maintained on systems located outside of Your jurisdiction. Specifically:

(a) Supabase processes authentication data on its cloud infrastructure. For details on Supabase's data hosting locations, please refer to Supabase's privacy policy;

(b) PostHog processes analytics data on its cloud infrastructure. For details on PostHog's data hosting locations, please refer to PostHog's privacy policy;

(c) Brevo processes email-related data on servers located in the European Union; and

(d) The Company's own systems may process data in Singapore or other jurisdictions where Our infrastructure is hosted.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and that no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place, including the security of Your data and other personal information.

Your Data Protection Rights

Depending on Your location and applicable law, You may have the following rights regarding Your Personal Data:

Under the Personal Data Protection Act 2012 (PDPA) - Singapore

(a) Right of Access: You may request to know what Personal Data We hold about You and how it has been used or disclosed within the past year.

(b) Right to Correction: You may request correction of any Personal Data that is inaccurate or incomplete.

(c) Right to Withdraw Consent: Where We rely on consent as the lawful basis for processing (such as promotional emails), You may withdraw Your consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

Under the General Data Protection Regulation (GDPR) - European Union

If You are located in the European Economic Area, You additionally have:

(d) Right to Erasure: You may request deletion of Your Personal Data, subject to Our legal obligations to retain certain records.

(e) Right to Restriction: You may request that We restrict the processing of Your Personal Data under certain circumstances.

(f) Right to Data Portability: You may request a copy of Your Personal Data in a structured, commonly used, and machine-readable format.

(g) Right to Object: You may object to the processing of Your Personal Data where We rely on legitimate interest as the lawful basis.

How to Exercise Your Rights

To exercise any of these rights, please contact Us at  support@vue-pdf-viewer.dev. We will respond to Your request within thirty (30) days. We may ask You to verify Your identity before processing Your request.

Account Deletion

You may request deletion of Your Account at any time by contacting Us at  support@vue-pdf-viewer.dev. Upon Account deletion, We will delete or anonymize Your Personal Data within thirty (30) days, except where retention is required by applicable law or as described in the Retention section above. Please note that Account deletion is irreversible. For further details on the effect of Account deletion, please refer to the Terms and Conditions.

Disclosure of Your Personal Data

Business Transactions 

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy. 

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of Users of the Service or the public
• Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us. We implement commercially reasonable technical and organizational measures to protect Your data, including:

(a) Encryption of passwords using industry-standard hashing algorithms via Our authentication Service Provider (Supabase). We do not store passwords in plaintext;

(b) Encryption of data in transit using TLS/SSL;

(c) Access controls limiting Service Provider access to Personal Data on a need-to-know basis.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Data Breach Notification

In the event that the Company becomes aware of a data breach that is likely to result in significant harm to You, We will:

(a) notify affected users without undue delay and, where required by applicable law, of becoming aware of the breach;

(b) notify the relevant data protection authority as required under the PDPA or any other applicable data protection legislation; and

(c) provide You with information regarding the nature of the breach, the data affected, and the measures taken or proposed to address the breach.

Cookies Policy

How We Use Cookies

We use cookies to enhance your experience and support essential functions such as authentication and analytics. Cookies are small text files placed on your device that help ensure secure access and provide insights into how our service is being used.

Types of Cookies We Use:

• Authentication Cookies/Tokens (Type: First-party Purpose): Upon login, Our authentication Service Provider (Supabase) issues a session token stored in Your browser. This token is necessary to verify Your identity when accessing Your Account and License management features. It expires after a period of inactivity or when You log out.
• Analytics Cookies (PostHog, Type: First-party Purpose): We use PostHog to understand how users interact with Our Service. These cookies collect data on user behavior, such as page visits and interaction patterns, to help Us improve the functionality and performance of the Service. These cookies persist for the duration configured in Our PostHog setup.

Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings at any time. However, please note that disabling cookies may limit your access to certain features, including the Manage License page and some analytics functionalities that help us improve your experience.

Children's Privacy

Our Service is not intended for anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 18 without verification of parental consent, We take steps to remove that information from Our servers.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can reach out to us directly at support@vue-pdf-viewer.dev