QuestPDF

Appearance

Privacy Policy

Effective Date: 10 June 2026
Version: 2.0

The QuestPDF Library Itself Collects No Data

The QuestPDF Software is a library that runs entirely in your own environment. It does not contact QuestPDF servers, does not collect telemetry, and does not transmit your application data or your end users' data to QuestPDF.

This Privacy Policy applies to the QuestPDF website, the purchase process, and the support relationship. It does not apply to data processed solely within your own applications through the ordinary use of the Software.

Who We Are

QuestPDF (Marcin Ziąbek CodeFlint) is a Polish sole proprietorship (jednoosobowa działalność gospodarcza) and acts as the controller of the personal data described in this Privacy Policy, unless stated otherwise.

QuestPDF's registered details: Marcin Ziąbek CodeFlint, Chrzanowska 29, 32-551 Mętków, Poland; NIP (VAT ID): PL6282275649.

For payment and transaction processing, Paddle acts separately as an independent controller under its own privacy documentation.

What Data We Collect

Depending on how you interact with QuestPDF, we may collect the following categories of data:

  1. License and contact data — such as name, company name, business email address, country, and purchase-related identifiers needed for license administration and support.
  2. Support data — such as emails, attachments, and other information you choose to provide when requesting support.
  3. Website usage data — limited cookieless analytics data used to understand aggregate website usage and improve documentation and the website.

QuestPDF does not intentionally collect more personal data than is reasonably needed for these purposes.

Software Does Not Transmit Data

The Software does not initiate outbound network communication to QuestPDF and does not perform license checks against QuestPDF servers.

QuestPDF therefore does not receive, access, store, or otherwise process the application data handled by your own systems through the ordinary use of the Software.

Data Processing Roles and International Transfers

For customer application data processed inside your own systems through the Software, QuestPDF is not a processor or sub-processor because that data is not sent to QuestPDF.

For QuestPDF's own business operations, QuestPDF acts as an independent controller of the personal data it processes for licensing, support, and related communications.

Paddle acts as an independent controller for payment, billing, invoicing, and related transaction data processed through the checkout flow.

Some QuestPDF service providers may process limited personal data on QuestPDF's behalf. Where personal data is transferred outside the EEA or UK, QuestPDF uses an appropriate transfer mechanism where required by law, such as the European Commission's Standard Contractual Clauses or another lawful transfer basis.

Legal Basis for Processing (GDPR Article 6)

Where GDPR applies, QuestPDF relies on the following legal bases:

  1. Contract performance — to administer licenses, provide updates or support, and respond to product-related requests.
  2. Legal obligation — to retain records where required by applicable tax, accounting, or other mandatory laws.
  3. Legitimate interests — to operate, secure, and improve the website, documentation, and support processes, provided those interests are not overridden by data subject rights.
  4. Consent — where QuestPDF asks for consent, for example for optional marketing communications.

Retention Periods

QuestPDF keeps personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, support, and dispute-resolution needs.

As a general rule:

  • purchase and license records are retained for the period required by applicable tax and accounting law;
  • support correspondence is retained for a limited period reasonably necessary for support history, product improvement, and dispute resolution; and
  • cookieless analytics data is retained in aggregate form in accordance with the settings of the analytics provider.

QuestPDF may retain data for a longer period where required by law or reasonably necessary to establish, exercise, or defend legal claims.

Your Rights Under GDPR (Articles 15–22)

Where GDPR applies, you may have the right to request access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where consent is the legal basis.

To exercise a privacy right, contact [email protected]. QuestPDF will respond within the time required by applicable law.

You also have the right to lodge a complaint with the Polish supervisory authority, Urząd Ochrony Danych Osobowych (UODO), or with another competent supervisory authority where allowed by law.

California Residents (CCPA/CPRA)

QuestPDF does not sell personal information or share personal information for cross-context behavioural advertising.

If applicable California privacy law applies to QuestPDF's processing, California residents may request access to, correction of, or deletion of personal information and may exercise any other rights granted by applicable California law by contacting [email protected].

Disclosure to Third Parties

QuestPDF may disclose personal data only:

  1. to service providers acting on QuestPDF's behalf under appropriate contractual protections;
  2. to Paddle or other parties involved in the transaction where necessary for purchase, billing, tax, or refund handling;
  3. where required by law, court order, or valid governmental request; or
  4. where reasonably necessary to protect QuestPDF's rights, security, or users.

QuestPDF may also publish or share aggregated or anonymised information that does not identify individuals.

Third-Party Providers and Independent Controllers

QuestPDF currently relies on a limited number of third-party providers for hosting, analytics, email delivery, payment processing, and AI services.

As of the Effective Date:

  • Paddle acts as an independent controller for checkout and transaction data.
  • DigitalOcean may host QuestPDF infrastructure.
  • Postmark / ActiveCampaign may be used for transactional email delivery.
  • Plausible may be used for cookieless website analytics.
  • GitHub may be used for source-code hosting, issue tracking, discussions, release management, and related development workflows.
  • Linear may be used for internal issue tracking, project management, roadmap planning, and support-related workflow management.
  • OpenAI / Anthropic / Google Gemini may be used as AI service providers for internal email triage, support summarisation, response drafting, and operational automation.

QuestPDF may update this list from time to time. The current list may be provided on request or maintained on the QuestPDF website.

Use of AI in Support and Operations

QuestPDF uses AI tools to help operate its support and internal workflows, for example to triage incoming messages, summarise support requests, and help draft responses.

Where AI is used, a human remains involved in the process. QuestPDF does not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

When AI is used to assist with support, it processes only information that you have provided to QuestPDF for that purpose — primarily the content of your support emails and related materials such as GitHub issues or discussions. It is not used to access data from your own systems or the application data processed within your own use of the Software.

Security Measures

QuestPDF uses reasonable technical and organisational measures designed to protect personal data, such as access controls, transport encryption where appropriate, and limited access to operational systems.

No method of transmission or storage is completely secure, so QuestPDF cannot guarantee absolute security.

Security Incident Notification

If QuestPDF becomes aware of a personal data breach affecting personal data held by QuestPDF, QuestPDF will take steps required by applicable law, which may include notifying competent authorities and affected individuals where legally required.

Cookie Policy

QuestPDF aims to minimise tracking.

QuestPDF currently uses cookieless analytics configured not to identify individual visitors. If the website uses cookies, they are intended to be limited to cookies that are strictly necessary for core site functionality, unless QuestPDF later presents a different notice or consent mechanism.

You can also control cookies through your browser settings.

Children's Privacy

QuestPDF is not directed to children and does not knowingly collect personal data from children where such collection would require parental consent under applicable law.

If QuestPDF learns that it has collected such data unintentionally, QuestPDF will take reasonable steps to delete it.

Changes to This Policy

QuestPDF may update this Privacy Policy from time to time. The updated version will be posted on the website with a revised Effective Date.

If a change materially affects how QuestPDF processes personal data, QuestPDF will use commercially reasonable efforts to provide appropriate notice.

Contact

For privacy-related inquiries or requests, contact:

[email protected]
QuestPDF (Marcin Ziąbek CodeFlint)
Chrzanowska 29, 32-551 Mętków, Poland
NIP (VAT ID): PL6282275649

View all licensing documents Download (PDF)