IT-RANKS Technology ("IT-RANKS", "we", "us", or "our") develops ITR PDF Suite, a PDF application for desktop and mobile devices (Windows, macOS, iOS, and Android), and operates the website itrpdf.com and the account portal at portal.itrpdf.com (together, the "Service"). This Privacy Policy describes what information we collect, how we use and share it, and the choices you have.
ITR PDF Suite is an offline-first desktop app. Viewing, editing, OCR, redaction, form filling, signing, conversion and protection all run locally on your device. The contents of your PDF files are not sent to or stored by IT-RANKS. The only data that reaches our servers is the limited account and license information described below, the administration information an organization uses when it manages your account (section 5) — and, where you choose to enable them, the optional cloud and AI features.
01 Information we collect
Account information
When you register on the portal, we collect your email address, a securely hashed password, and your name if you provide it. We also store your license and subscription status, trial dates, and plan.
Billing information
If you purchase a license, payment is handled by our third-party payment provider. We receive confirmation of payment and limited billing details (such as plan, amount, and a transaction reference). We do not collect or store full payment card numbers.
License activation & validation
When the app activates or periodically re-validates your license, it sends your account token, the app version, and your platform/operating system to our license service to confirm your entitlement.
Update checks
The app checks for new versions by contacting our update server, which receives your current version, platform, and architecture so it can tell the app whether an update is available.
Support communications
If you contact us (for example at [email protected]), we receive the information you choose to share.
Website & server logs
Our website is intentionally minimal. Our servers keep standard technical logs (such as IP address, timestamp, and user agent) for security, abuse prevention, and reliability. We do not use third-party advertising networks or cross-site tracking.
What we do not collect
We do not collect, transmit, or store the contents of the PDF files you work with in the app. Your documents remain on your device, except where you explicitly choose to use the optional cloud storage or AI features described below.
02 Optional cloud storage connections
ITR PDF Suite lets you connect your own Microsoft OneDrive, Google Drive, or Dropbox account so you can open and save PDFs stored there. This is entirely optional and turned off by default.
- You sign in on the provider's own secure page using OAuth. We never see your provider password.
- The app receives a revocable access token, which is stored locally in your operating system's secure keychain (Windows Credential Manager / macOS Keychain) — never on IT-RANKS servers.
- Files transfer directly between your device and the cloud provider. We do not route, copy, or store your cloud files. The app requests only the access needed to browse folders and open or save the PDFs you select.
- You can disconnect a provider at any time inside the app, which deletes the stored token. You may also revoke access from the provider's own security settings.
03 Provider & platform compliance
We hold data from every connected cloud provider to the same strict standard. For any provider you connect — Microsoft OneDrive, Google Drive, or Dropbox — we use the access only to let you browse, open, and save the PDFs you choose. We do not use cloud data for advertising, we do not sell it, we do not use it to build, improve, or train artificial-intelligence or machine-learning models, and we do not let humans read it — except where you ask us to, where it is required for security or by law, or where it has been aggregated and anonymized. Files move directly between your device and the provider, and access tokens are stored only in your device's secure keychain.
For Google Drive specifically, ITR PDF Suite requests the https://www.googleapis.com/auth/drive scope and uses it only to browse, open, and save the PDFs you choose. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we do not transfer this data except to provide these features, to comply with applicable law, or in a merger or acquisition with appropriate safeguards; we do not use it for advertising or to profile users; and we do not use it to develop, improve, or train generalized AI or machine-learning models.
Where you obtain or use the app through an application marketplace — such as the Apple App Store, Google Play, or the Microsoft Store — we also follow that platform's privacy and data-handling requirements, and your use of the app is additionally subject to that platform's own terms and privacy policy.
04 Optional AI assistant
ITR PDF Suite includes optional AI features that are off until you enable them with an API key for a supported AI provider — your own, or one your organization provides.
- When you use an AI feature, the document text or content you select is sent directly from your device to the AI provider you configured, using that key, to generate the result.
- The AI assistant only processes content you explicitly act on within an open document. It does not read your connected cloud accounts or file lists, and nothing is sent to an AI provider unless you trigger an AI feature.
- Your own API key is stored locally in your operating system's keychain; IT-RANKS never receives it. IT-RANKS does not operate the AI model and never receives the content you send or the replies.
- If your organization provides an AI key, IT-RANKS keeps it for your organization and delivers it to your organization's devices. Each request made with it is counted — provider, model, token counts and time — and the counts are shown to your organization's administrators. The prompt, the document and the reply are never recorded.
- Your use of a third-party AI provider is governed by that provider's own terms and privacy policy.
05 Organization accounts
If your account belongs to an organization, the organization's administrators manage it from the portal. In addition to the information in section 1:
- Your organization's settings — for example which features are available — reach your devices inside your signed license and are applied there.
- Each of your devices reports its operating system, app version, last check-in and the settings version it applies, so administrators can see the devices on their plan.
- AI requests made with your organization's key are counted as described in section 4.
- If your organization's Owner turns on usage counts, your devices report how often each feature is used — the action and the day, never a file name. Your organization sees totals for the whole organization, not per person. The app says so in License & Account.
- When your organization's settings block something you try to do, that is recorded in your own activity history on your device only — it is not sent to anyone.
Activity audit — off unless your organization turns it on
An organization's Owner can turn on an activity audit for its members. It is off by default. When it is on for your account:
- Your device sends your organization a record of what you do with documents in the app: the action, the time, the device and the file name. Your organization can choose to record only the file extension, or no file name at all.
- Never recorded: the contents of your documents, file paths, passwords, AI prompts and replies, and PaperPlane recipients. PaperPlane transfers are recorded without a file name.
- Turning off your personal activity history does not stop the audit. You can see exactly the records your administrators see.
- The app tells you when the audit applies — when you sign in, and under "Managed by your organization" in License & Account.
- Your organization chooses how long records are kept, from 30 days to 3 years (1 year unless it chooses otherwise). Records are stored on the account portal for your organization and are not visible to IT-RANKS staff by default. Your organization can also send them to its own security systems.
06 How we use information
- Provide, activate, and maintain your license; operate trials and subscriptions.
- Authenticate you and keep your account secure.
- Process payments and send transactional messages (receipts, renewal and expiry notices, security alerts).
- Provide customer support and respond to your requests.
- Let an organization manage the accounts on its plan, as described in section 5.
- Deliver app updates and maintain the reliability and security of the Service.
- Comply with legal obligations and enforce our terms.
We do not sell your personal information.
07 How we share information
- Service providers (processors): hosting, payment processing, and email delivery partners who are bound to protect your data and use it only to provide services to us.
- Cloud and AI providers you connect: at your direction, as described above.
- Your organization: if your account belongs to an organization, its administrators see the information described in section 5.
- Legal and safety: when required by law, or to protect the rights, property, or safety of IT-RANKS, our users, or the public.
- Business transfers: in connection with a merger, acquisition, or sale of assets, with continued protection of your information.
08 Data retention
- Account and license data is kept while your account is active and for as long as needed to meet legal, tax, and accounting obligations, after which it is deleted or anonymized. If your organization turns on the activity audit, its records are kept for the period your organization chooses — 30 days to 3 years — and then deleted.
- Locally stored data — cloud access tokens, AI keys, and your documents — stays on your device under your control. Cloud tokens are held only in your operating system's secure keychain, refreshed automatically while a provider is connected, and deleted immediately when you disconnect that provider in the app. You can also revoke access at any time from the provider's own security settings (for Google, at myaccount.google.com/permissions).
09 Security
We take reasonable technical and organizational measures to protect your information: passwords are hashed, data in transit is encrypted with HTTPS/TLS, and access to our systems is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to keep sensitive material on your own device wherever possible.
10 Your rights & choices
- Access, correct, export, or delete your account data — contact [email protected] or manage it in the portal.
- Disconnect cloud providers or disable AI features in the app at any time.
- Depending on your location, you may have additional rights under laws such as the GDPR or CCPA. We honor valid requests as required by applicable law.
11 International transfers
IT-RANKS operates internationally, and the limited account information we process may be stored and processed in countries other than your own. Where required, we use appropriate safeguards for such transfers. By using the Service, you understand that your account information will be handled as described in this policy.
12 Children
The Service is intended for business and professional use and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
13 Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above, and for material changes we will provide a more prominent notice where appropriate. Your continued use of the Service after an update means you accept the revised policy.
14 Contact us
If you have questions about this policy or your data, contact us at:
IT-RANKS Technology
Email: [email protected]
Web: itrpdf.com