Controller and contact
The controller is Sinfin s.r.o., P铆snick谩 763/29, Kam媒k, 142 00 Prague 4, Czech Republic, Company ID 45800171, VAT ID CZ45800171. Contact support@embedfox.com. Sinfin has not appointed a data protection officer.
Privacy
Privacy notice
Effective 17 August 2026. This notice explains the data needed to run EmbedFox. It is not an advertising-data policy.
What we process and why
- Public upload: PDF, file metadata and the public document URL. The legal basis is performance of the requested service. Anonymous uploads expire after seven days.
- Account and billing: email address, account and workspace records, plan and payment references. The legal basis is contract performance and legal accounting duties.
- Security and abuse: limited technical request data, reports and moderation records. The legal basis is our legitimate interest in secure, lawful operation and protection of users.
- Support: the information you send to us. The legal basis is contract performance or our legitimate interest in answering and improving support.
Recipients and location
We use Cloudflare for the web service, storage, delivery and Turnstile anti-abuse checks on public forms; Stripe for payments; Resend for transactional email; and self-hosted Sentry for error reports with identifying request data removed before sending. Production PDF rendering is constrained to the EU. The document store is configured for EU-first operation. A supplier may process limited operational data outside the EEA only under its applicable data-transfer safeguards.
Retention, cookies and analytics
Anonymous public documents are retained for seven days. We keep account, billing, report and support data only for the service relationship, legal obligations, security or a possible legal claim. We do not use advertising cookies or third-party marketing trackers. Aggregate reader measurement is designed without reader profiles or analytics cookies. A strictly necessary, secure cookie may be set for sign-in or an access control chosen by a publisher.
Your rights
You may request access, correction, deletion, restriction, objection or portability where the GDPR provides it. You may complain to the Czech Data Protection Authority. Send a request to support@embedfox.com; we may ask for information needed to verify the request.