1. Who is responsible
The operator of BOA PDF (digitalcheck.ng) is the controller of personal data processed through the Service, unless a school, employer, or other organization directs you to use an instance they operate—in which case that organization may be the controller and this Policy describes how the software typically handles data.
Privacy contact: management@boapdf.com.
2. Information we collect
Account information
When you register we collect your name, email address, and a hashed password. We also store email verification status and whether the account is active or an administrator.
Documents and signatures
We store the PDF files and derived outputs you create (merged, compressed, converted, edited, or signed documents), related metadata (such as page counts, operation type, and signature placement), and optional signature images you draw, type, or upload. Upload size limits apply (currently about 50 MB per file unless configured otherwise).
Signature invitations
If you invite someone to sign, we process the invitee’s email address, the invitation token/link, and whether the request was completed. Invitees who open a link may submit a signature without creating a full account.
Technical and security data
We process session cookies necessary to keep you signed in and protect forms (CSRF). We may log IP address, user agent, timestamps, and similar request metadata for security, abuse prevention, and operational auditing. Administrators may review audit records of significant account and document actions.
Communications
We send transactional email such as email verification, password reset, and signature invitation messages. We do not sell personal information.
3. How we use information
- Provide, maintain, and improve the Service features you request.
- Authenticate users, verify email addresses, and secure accounts.
- Send service-related notices (verification, resets, signature invites).
- Enforce the Terms of Use, prevent abuse, and investigate incidents.
- Comply with law and respond to lawful requests.
- Understand reliability of PDF operations through conversion and similar operational logs.
Where privacy laws require a “legal basis,” we typically rely on: performance of a contract (providing the Service), legitimate interests (security, product integrity, limited auditing), consent (where we ask for it, such as accepting these policies at registration), and legal obligation when applicable.
4. How we share information
We share personal data only as needed to run the Service, for example:
- Infrastructure providers that host the application, database, file storage, or email delivery, under confidentiality and security obligations.
- Other users you involve, such as people you invite to sign a document (they receive the invitation and related document access needed to complete signing).
- Legal and safety disclosures when required by law or to protect rights, safety, and the integrity of the Service.
We do not sell your personal information or your documents.
5. Retention
Document library files are generally retained for approximately 30 days from creation, after which they may be automatically deleted along with associated storage. Temporary processing files may be removed sooner (on the order of 24 hours for some artifacts).
Account profile data is kept while your account remains open. If you delete your account, we remove or anonymize personal identifiers and delete associated personal documents, while retaining a limited anonymized audit record of the deletion for accountability (for example that an account was closed, without keeping your original email as an active login identity).
Security and operational logs are retained only as long as reasonably needed for security, debugging, and compliance.
6. Security
We use industry-standard measures appropriate to a web application of this type, including hashed passwords, session-based authentication, CSRF protection, ownership checks on documents, and private storage for uploaded files served through application controls rather than public links by default. No method of transmission or storage is perfectly secure; you should avoid uploading highly sensitive material if your risk tolerance requires stronger contractual or compliance guarantees than this free Service provides.
7. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to or restrict certain processing. You can:
- Update your name and email from your profile.
- Change your password.
- Delete individual documents from your library.
- Delete your account from your profile (subject to limited safeguards, such as preventing removal of the last active administrator).
- Contact us at management@boapdf.com for other privacy requests.
If an organization (such as a school) provides your access, you may also need to contact that organization.
8. Cookies and similar technologies
We use essential cookies and session storage to authenticate you, remember your session, and protect forms. We do not use advertising trackers as part of the core Service. Third-party CDNs used for frontend libraries may set their own technical cookies according to their policies.
9. International users and students
The Service may be hosted in a country different from yours. By using the Service you understand that your information may be processed in the location where our servers and providers operate, with safeguards appropriate to the transfer where required by law.
The Service is intended for a broad audience, including students. We do not knowingly collect personal information from children in a way that violates applicable children’s privacy laws. If you believe a child has provided personal data without required consent, contact us and we will take appropriate steps to delete it.
10. Changes to this Policy
We may update this Privacy Policy as the Service evolves (including if free plans later become paid). We will revise the effective date and, for material changes, provide notice through the Service or email when practical.
11. Contact
Privacy questions or requests: management@boapdf.com.
This Policy describes our practices for BOA PDF. It is not legal advice. If you need jurisdiction-specific compliance (GDPR DPIAs, HIPAA, FERPA, etc.), consult qualified counsel before relying on the Service for regulated data.