Privacy Notice - Readdle Website
Skip to main content
Legal

Privacy Notice
Readdle Website

Last updated: October 17, 2025.

Key Changes for Readdle Website

At Readdle, we care about our users, and, as Readdle evolves, we have improved our Privacy Notice governing your use of Readdle website.

In a nutshell, we: 

  • updated processing details when you contact the support chat, and
  • updated data subject rights for Canadian residents.

We encourage you to carefully review the full text of this Privacy Notice. The changes become effective as of the publication date above.

 

Intro

Readdle Limited (“ Readdle” or “ we”) welcomes you on our website  readdle.com (“ Website”).

This Privacy Notice describes which of your personal data the Website collects, how stores, processes, and uses it, and what happens when you use the Website.

We collect your personal data according to this Privacy Notice when you use the Website or interact with us on the social media pages of Readdle and/or our products.

We understand you care about your privacy, and we appreciate the trust you place in us. To justify that trust, we embed the latest data security standards, improve our awareness of privacy matters, and comply with the General Data Protection Regulation and other privacy laws.

When you use our products, your data is processed according to the respective Privacy Notices of these products:

Our Product Link to the Privacy Notice
Scanner Pro Privacy Notice
Scanner Mini Privacy Notice
Calendars Privacy Notice
Documents Privacy Notice
PDF Expert Privacy Notice for website
Privacy Notice for app

Table of Contents

About Us

Controller Readdle Limited
Company number: 630281
Glandore Business Centres, 26-27 Fitzwilliam Place, Fitzwilliam Hall, Dublin 2, D02T292, Ireland

Data Protection Officer Privacity GmbH
Neuer Wall 50, 20354 Hamburg, Germany
Email rdsupport@readdle.com– for general inquiries
dpo@readdle.com– for privacy inquiries

About You

When you visit our Website, you become our user (“ User”). Please note that we do not knowingly process the personal data of Users under the age of 18. If you are such a User or you are a legal representative of such a User, please contact us.

Personal Data

Sources of Data

We receive data when you visit our Website and interact with it, depending on your actions on the Website.

We may also, although we do not necessarily do so, receive data from third parties. It depends on your settings and the features you use.

Lawful Bases for Processing

To process your personal data, we rely on the following lawful bases:

  • performance of the contract— for the processing of personal data necessary for the negotiating on, conclusion, and performance of a contract with you;
  • legal obligation— for the processing of data as required by applicable laws or if requested by a law enforcement agency, court, supervisory authority, or another state-authorized public body;
  • legitimate interest— for the processing necessary for the development of our services, taking into consideration your interests, rights, and expectations;
  • consent— for additional processing for specific purposes.

Personal Data in Readdle

We collect your personal data according to this Privacy Notice when you visit the Website, depending on how you interact with it.

Information about you

We may collect and process data you provide when subscribing to our newsletter.

Data Reasons for processing Lawful Basis Data Storage
Email Marketing mailing Consent Stored until you unsubscribe from the mailing

Technical Data

Similar to many other websites, we collect certain data about our Users when you visit our Website via cookies and similar technologies. Specifically, we may process such data as your IP address, device type, operating system version, unique device identifiers, browser type and language, domain, platform type, statistics about how you interact with the Website and other technical details.

For more details please refer to our Cookies Policy.

Support Requests Data

When you address your request for support, we collect some information to help you. We may collect analytics on the categories of User requests to improve our services and responses to the requests. We may retain AI providers to define the category of your request more efficiently. The requests are pseudonymised before such processing. No data will be used for training.

Depending on the source of your request, we may process the following data:

Requests Submitted through the “Contact Support” form
Data Reasons for Processing Lawful Basis Data Storage
Name To respond to your request Performance of contract Stored during communication and for six (6) years after the last communication on the ticket
Email
The product you have issues with 
Subject of the letter
Message
Type of the device on which you use our product
Attached file
The product you have issues with Improvement of the Website and our products Legitimate interest Stored during communication and for six (6) years after the last communication on the ticket or until you object to the processing
Subject of the letter
Message
Type of the device on which you use our product
Requests Submitted through the Support Chat
Data Reasons for Processing Lawful Basis Data Storage
Messages and commands in the chat To respond to your request Performance of contract If you submit your request to our support team, the data is stored during communication and for six (6) years after the last communication on the ticket

If you use Support Chat but do not submit your request to our support team, the data is stored during communication and up two (2) years after closing the conversation
The product you have issues with
User ID
It is not linked to your name or email, unless you share them. It is a number randomly assigned only for answering your requests in the chat
Name
Email
Type of the device on which you use our product, when you want to request a feature
Technical data:
  • Operating system, browser version and language;
  • IP address;
  • Country, city and time zone;
  • Navigation data, such as number of connections, duration of a session, first seen, last seen, recent pages of our website and date of connections.
Attached file
Metadata of the attached file
Subscription information:
  1. Charging platform;
  2. Subscription type and state;
  3. Product you subscribed to;
  4. Subscription expiration date;
  5. Subscription auto-renewal status;
  6. Features available.
Interaction with the Support Chat Improvement of the Website and our products Legitimate interest Stored during communication and for six (6) years after the last communication on the ticket or unless you object to the processing
The product you have issues with
User ID
It is not linked to your name or email, unless you share them. It is a number randomly assigned only for answering your requests in the chat
Type of the device on which you use our product, when you want to request a feature
Technical data:
  • Operating system, browser version and language;
  • IP address;
  • Country, city and time zone;
  • Navigation data, such as number of connections, duration of a session, first seen, last seen, recent pages of our website and date of connections.
Attached file
Metadata of the attached file

To enhance our Support Chat, we may offer the option of using AI-powered assistance from the trusted provider. In this case you can get quick, automated responses to your inquiries. No data will be used for training. Still, you can always choose to continue the chat without AI, if you prefer so.

Feedback Data

When you submit your feedback about our products to us directly or via third-party platforms or comment in our blog, we process personal data in your feedback, which may include data listed below:

Feedback Provided to us Directly
Data Reasons for Processing Lawful Basis Data Storage
Email To respond to your feedback and ask for your consent Consent Stored for six (6) years from feedback or the last communication on feedback
First and last name or username To use your feedback in our marketing activities
Text of the feedback
Feedback Provided via a Third-party Platform 
Data Reasons for Processing Lawful Basis Data Storage
First and last name or username To use your feedback in our product development and/or marketing activities Legitimate interest Stored for two (2) years from feedback or the last communication on feedback
Text of the feedback

We may also collect data from the Facebook Comments Plugin available in the comments at our “Blog” page:

Comments at our “Blog” page
Data Reasons for Processing Lawful Basis Data Storage
Your comment To display it in the comments section of the article Performance of a contract Stored until you delete the comment or for the lifelong of an article’s existence
Photo and full name from Facebook

We may collect analytics on the categories of issues mentioned in the feedback to improve our services. We may retain AI providers to define the category of your feedback more efficiently. The feedback is pseudonymised before such processing. No data will be used for training.

Feature Request Data

We may collect data when you request a feature through the form on our Website.

We will use your data to prepare a proposal for our product development team, and your email and name to contact you for more details (only if needed) and notify you of the implemented features resulting from your request.

We may collect analytics on the categories of User requests to improve our services. We may retain AI providers to define the category of your request more efficiently. The requests are pseudonymised before such processing. No data will be used for training.

Feature Requests Submitted on the Website
Data Reasons for Processing Lawful Basis Data Storage
Type of device To process your proposal Consent Stored for six (6) years or unless you withdraw your consent
Name
Email addresss
Text of the request
IP address To process your proposal Legitimate interest Stored for six (6) years or unless you object to processing
Country
Date and time of the submission
Unique request identifier (token)

Recruitment Data

When you apply for career opportunities at Readdle, we collect personal data about you to evaluate your qualifications. This data may be obtained from third-party hiring providers, publicly available sources such as professional networks or other public profiles, or directly from your application forms and resumes or during your interviews.

Data Collected from a Third-Party Hiring Provider at “Careers” Page
Data Reasons for Processing Lawful Basis Data Storage
Full name To identify the candidate Performance of the contract Stored during communication and for one (1) year after
Email To contact the candidate
Phone number
Resume/CV To evaluate the candidate’s qualifications
Employment history
Education history
Position you want to apply for
Additional information message To process the message Consent Stored during communication and for one (1) year after or until the consent is withdrawn
Data Collected from Public Sources
Data Reasons for Processing Lawful Basis Data Storage
Professional social media account and/or portfolio To communicate with the candidate and propose cooperation Legitimate Interest Stored until the candidate objects

We may collect certain data directly from you when we meet at conferences or explore potential collaborations.

Data Collected from the Candidate Directly
Data Reasons for Processing Lawful Basis Data Storage
Full name To communicate with the candidate and propose cooperation Consent Stored until the consent is withdrawn
Email
Job title
Place of job

Data Received from Third Parties

We may receive some personal data from third parties.

The amount of data collected, the purposes, and the lawful basis for processing is determined by the respective privacy documents of these parties.

Third Party Description
Analytics tools We use various analytics tools to understand and promote our business. To get a detailed list of analytics tools, contact us.
Social networks We use various social networks to spread information about our activities. To get a detailed list of social networks, contact us.
Messengers We use different messengers to communicate with you in ways that are convenient for you. To get a detailed list of messengers, contact us.
CRM systems We use various CRM systems to develop our public organisation. To get a detailed list of CRM systems, contact us.

Data Sharing with Third Parties

We may share your personal data with third parties without causing you any harm and in strict compliance with applicable laws. Additionally, we have put in place organizational and technical measures to secure your personal data during its transfer to third parties.

To share your data, we rely on the following lawful bases, such as consent, compliance with the law, and performance of a contract, depending on the specific circumstances.

Third parties Description
Analytics tools We use analytics tools to understand and promote our business.
Contractors We cooperate with contractors to operate, develop, and improve the functionality of the Website, fulfill your support requests, etc.

We sign data processing agreements with them and impose various security measuresto ensure your data is safe.
Services Readdle uses We use third-party services to provide you with the functionality of the Website.
Services our team uses We use CRM systems, messengers, and other services in our organization to provide you with our services.
To manage and fulfill privacy requests we use:
  • Sparkfor processing requests and communication with Users;
  • Jirafor internal tracking and timely involvement of responsible ones in the scope of the request..
State authorities, courts, law enforcement agencies, etc We may be obliged to transfer some of your data to tax authorities, courts, law enforcement agencies, and other governmental bodies:
  • to comply with a government request, court order, or applicable law;
  • to prevent unlawful use of the Website;
  • to protect against claims of third parties;
  • to help prevent or investigate fraud.
To get a detailed list of the third-party recipients of your personal data, contact us.

Data Transfer Outside the European Economic Area

The personal data we collect is stored on the US servers, which participate in the Data Privacy Framework, and European Economic Area (“EEA”) servers, which fall under the General Data Protection Regulation.

We may share personal data with the recipients in the USA and other countries, including non-EEA ones, ensuring that your data is protected and processed in accordance with the General Data Protection Regulation. 

To share the data outside the EEA, we rely on the adequacy decision by the European Commission or the Data Privacy Framework participation of the recipient. If the recipient does not participate in the Data Privacy Framework and its country is not deemed to provide an adequate level of protection for your personal data, we adopt Standard Contractual Clauses based on legislation assessments for data protection during transfer and storage.

You can read more detailed measures to protect your personal data here.

Security Measures

We routinely conduct Data Protection Impact Assessments to guarantee the implementation of adequate technical and organizational measures. These measures aim to prevent accidental or unlawful destruction, loss, alteration, and unauthorized disclosure of or access to personal data transmitted, stored, or otherwise processed. 

To enhance the protection of your personal data, we employ HTTPS and encryption, establish segmented group and individual access (as necessary), utilize an alarm system, implement a corporate VPN, and adhere to formally approved internal policies, including those for password management and physical access. 

Furthermore, we consistently monitor the state of the art of our technologies and diligently maintain the backups. Additionally, all our contractors are bound by contractual obligations that comply with the GDPR requirements.

You can contact usin case of any questions regarding security issues.

Here you can find information about the specific steps we mentioned above:

Physical Measures
Limited access to premises
Organizational measures
Policies and instructions

  1. Password policy
  2. Monitoring and physical access policy
  3. Contractual obligations and corporate VPN
  4. Internal security policy
  5. Access control policy
 Transfer protection

  1. Data protection agreements
  2. Standard contractual clauses
  3. Data Privacy Framework
Contractor and staff trainings Agreements

  1. Non-disclosure agreements
  2. Data protection agreements
Regular access and policy review Privacy protection:

  1. Privacy by design and privacy by default
  2. Internal procedures for GDPR compliance
Code review
Technical measures
Encryption Technologies:
  1. Encryption in transit
  2. Backup encryption
  3. State-of-the-art methods of cryptographic keys
 Backup
  1. Regular backup of the entire system
  2. Redundant operation of the critical services in multiple data centers controlled by a high-availability system
Two-factor authentication Stress Tests
Static Analysis Quality Assurance
Regular Patch Management Dependency and Supply Chain Vulnerability Check 

Data Subjects Rights

European Economic Area and United Kingdom Residents

As a data subject, you have the right to access, manage, and control your data either directly or by submitting a request to us. This section outlines these rights and explains how you can exercise them based on your place of residence.

Right Description
Right to access You can request an explanation of the processing of your personal data.
Right to rectification You can change the data if it is inaccurate or incomplete.
Right to erasure You can send us a request to delete your personal data from our systems. We will remove them unless otherwise provided by law.
Right to restrict the processing You may partially or completely prohibit us from processing your personal data.
Right to data portability You can request all the data you provided to us and request to transfer data to another controller.
Right to object You may object to the processing of your personal data.
Right to withdraw consent You can withdraw your consent at any time.
Right to file a complaint If your request was not satisfied, you could file a complaint to the regulatory body.
To exercise your rights,  contact us.
For EEA residents: We will answer your request within one (1) month. If your request is not satisfied, you can submit a complaint to your local Data Protection Authority. You may find it here.
For UK residents: We will answer your request within one month. If your request is not satisfied, you can submit a complaint at the Information Commissioner’s Office via number 0303-123-1113 or go online at www.ico.org.uk/concerns.

United States Residents

Your rights vary depending on the state of your residency, as indicated below.

Right Description Area
Right to access You can request an explanation of the processing of your personal data. California
Virginia
Ohio
Colorado
Nevada
Massachusetts		 Minnesota
New York
North Carolina
Pennsylvania
Delaware
Utah
Right to correct You can change the information if it is inaccurate or incomplete. California
Virginia
Colorado
Nevada
Delaware		 Massachusetts
Minnesota
New York
North Carolina
Right to delete You can send us a request to delete your personal data from our systems. California
Virginia
Ohio
Colorado
Massachusetts		 Minnesota
New York
North Carolina
Pennsylvania
Utah
Right to portability You can request all the data that you provided to us, as well as request to transfer data to another controller. California
Virginia
Ohio
Colorado
Massachusetts		 Minnesota
New York
North Carolina
Utah
Right to opt out of sales The right to opt out of the sale of personal data to third parties. California
Virginia
Ohio
Nevada
Massachusetts
Minnesota		 New York
North Carolina
Pennsylvania
Delaware
Colorado
Utah
Right to opt out of certain purposes The right to opt out of processing for profiling/targeted advertising purposes. Colorado
Connecticut
Indiana
Montana		 Tennesse
Texas
Utah
Virginia
Right to opt out of the processing of sensitive data The right to opt out of the processing of sensitive data. California  
Right Against Automated Decision Making A prohibition against a business making decisions about a consumer based solely on an automated process without human input. California
Virginia
Colorado
Massachusetts		 Minnesota
North Carolina
New York
Private right of action The right to seek civil damages from a controller for violations of a statute. California
To exercise your rights, contact us.
We will answer your request within 30 to 60 days, depending on the state and legislative requirements. If your complaint is not satisfied, you can submit a complaint with the Federal Trade Commission.
Note: Some states do not have their own privacy laws. The rights of residents of such states are governed by U.S. federal law. If your state is not on the list, please contact us.

Do Not Sell My Personal Information

California residents, under the California Consumer Privacy Act (CCPA), possess the right to opt out of the “sale” of their personal information by entities governed by the CCPA.

We do not sell your personal information to anyone, nor do we use your data as a business model.

Ensuring your privacy is our utmost priority, and we are dedicated to safeguarding it.

We adhere to the CCPA by providing California residents the option to opt out of any potential future sale of their personal information. If you wish to register your preference that we do not sell your data in the future, please contact us at dpo@readdle.com. 

Do-Not-Track Requests

California residents visiting our Website have the option to request that we do not automatically collect and track information related to their online browsing activities across the Internet. 

These requests can usually be made via web browser settings that manage signals or other mechanisms, enabling consumers to express their preferences concerning the collection of personal data about their online activities over time and across third-party websites or online services. 

We currently do not have the ability to honor these requests. However, we may update this Privacy Notice as our capabilities evolve.

Canada Residents

Right Description
Right to be informed With the help of this Notice and Terms of Service, we enable your right to be informed of the purposes of the processing, including automated processing, the categories of personal data processed, the recipients or categories of recipients of such data, and the storage periods.
Right to access You can request an explanation of the processing of your personal data.
Right to correction/rectification You can change the data if it is inaccurate or incomplete.
Right to delete (Quebec residents only) You can send us a request to delete your personal data from our systems. We will remove all data except of what we are obliged to store in compliance with the law requirements.
Right to data portability (Quebec residents only) You can request all the data you provided to us and request to transfer data to another controller.
Right to withdraw consent You can withdraw your consent at any time.
Right not to be subject to automated decision-making You have the right to know if there are consequences for you due to automated processing. You can object to being subject to such processing.
Right to lodge a complaint If your request is not satisfied, you could file a complaint to the regulatory body.
To exercise your rights, contact us.
We will answer your request within thirty (30) days. If your complaint is not satisfied, you can submit a complaint to the Office of the Privacy Commissioner of Canada.

Cookies

We use cookies that are needed for the Website’s operation. By using cookies, we receive automatically collected data. You can read more in our Cookie Policy.

If you want to disable cookies, you can find instructions for managing your browser settings at these links:

Internet Explorer Firefox Chrome Opera
Microsoft Edge Vivaldi Safari Brave

Privacy Notice Updates

The Privacy Notice and the relationships falling under its effect are regulated by the General Data Protection Regulation. Please note that the laws and requirements for processing personal data can evolve. In the event of changes, we will release an updated version of the Privacy Notice on our Website to reflect these modifications.

If we make substantial changes to the Privacy Notice or the Website that affect your data privacy rights, we will notify you by email or display information on the Website and ask you to read it. You will be notified in advance, and if you continue to use the Website after these changes take effect, it will be considered that you have consented to and accepted the revised Privacy Notice.