Privacy Policy

Overview

ReferenceFlow is a browser-based PDF viewer. Your privacy is straightforward to explain: the PDFs you load never leave your device. They are stored in your browser’s IndexedDB and are never uploaded to our servers.

Information We Collect

We collect only what is necessary to provide the service:

• Account information — your name and email address, collected and managed by Clerk (our authentication provider) when you create an account.
• Payment information — processed by Stripe. We do not store your card details. Stripe retains payment records in accordance with their own privacy policy.
• License status — a boolean flag stored in your Clerk user profile indicating whether you have purchased a license.

Cookies and Local Storage

We use cookies and browser storage technologies to operate the service:

• Authentication cookies — Clerk sets session cookies to keep you signed in. These are necessary for the service to function and cannot be opted out of while using the service.
• IndexedDB — your PDF files are stored locally in your browser’s IndexedDB. This data never leaves your device and is not accessible to us.

We do not use advertising cookies, third-party tracking cookies, or any cookies for marketing purposes.

What We Do Not Collect

• Your PDF files — they never leave your browser.
• Your search queries within the viewer.
• Usage analytics or behavioral tracking.

Third-Party Services

We use the following third-party services:

• Clerk — authentication and user management. See clerk.com/privacy.
• Stripe — payment processing. See stripe.com/privacy.
• Vercel — hosting and infrastructure. See vercel.com/legal/privacy-policy.

Children’s Privacy

ReferenceFlow is not directed at children under the age of 13 and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

Data Retention

Account data is retained for as long as your account exists. If you request account deletion, your Clerk profile and associated license metadata will be permanently removed. Payment records are retained by Stripe as required by applicable law.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at support@referenceflow.app.

California residents — under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have the right to: know what personal information we collect and how it is used; request deletion of your personal information; correct inaccurate personal information; and opt out of the sale of personal information. We do not sell personal information. To exercise any of these rights, contact us at the email above.

International users — ReferenceFlow is operated from the United States. If you access the service from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the service, you consent to this transfer.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to registered users. Continued use of the service after changes are posted constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email us at support@referenceflow.app.