Pagestro home
GDPR

Legal

GDPR compliance

Last updated October 5, 2026

On this page

1.Our commitment to GDPR

The General Data Protection Regulation (GDPR) is a comprehensive European Union privacy regulation that governs the collection, use, and protection of personal data of EEA residents.

Pagestro is committed to GDPR compliance. We process all personal information in a lawful, transparent, and secure manner. Our "privacy-by-design" architecture processes files for our PDF, image and conversion tools in your browser, so they are never uploaded. Documents you save to your account are kept until you delete them or your account.

2.GDPR data rights

If you are a resident of the European Economic Area (EEA), you possess the following rights regarding your personal data:

  • Right of Access: You can request a summary and copy of all personal information we hold about you.
  • Right to Rectification: You can request that we update or correct inaccurate or incomplete personal data.
  • Right to Erasure (“Right to be Forgotten”): You can delete your account yourself in Settings, which permanently removes your saved documents and personal data. Files opened in our conversion tools are never uploaded, so there is nothing of those to delete. Signature requests and their audit trail (signer name, email, IP address, device and times) are kept while the sender’s account is open. If the sender deletes their account, we keep them until 7 years after the request ended (completed, declined, cancelled or expired) and then delete them, because they are evidence of a signed agreement and may be needed for legal claims. Details are in “People who sign or receive documents” in our Privacy policy.
  • Right to Data Portability: You can request that we export your personal account settings or data in a structured, machine-readable format.
  • Right to Object & Restrict Processing: You can object to our processing of your data for direct marketing, traffic analytics, or other business purposes.
  • Right to Withdraw Consent: Where our processing is based on your consent, you can withdraw that consent at any time.

4.Exercising your rights

To use any of your GDPR rights, or to make a complaint, email us:

Email: gdpr@pagestro.com
Subject: GDPR Data Request

Pagestro is a service of Sigma Studio (Dhaka, Bangladesh). Your request goes to the person who runs Pagestro.

We will check who you are to protect your account, and reply within one month. For complex requests we can extend this by up to two further months, and we will tell you if we do and why.

You also have the right to lodge a complaint with a supervisory authority, for example in the EU country where you live or work, or the UK Information Commissioner’s Office. We would appreciate the chance to fix the problem first.

5.Retention and transfers

  • Account data and saved documents: until you delete them or your account.
  • Signature requests and their audit trail: while the sender’s account is open; after it is deleted, until 7 years after the request ended (completed, declined, cancelled or expired).
  • Copies of emails we send: up to 30 days. Backups: we keep backup copies for a limited time and then delete them.

Our service providers (hosting, email delivery, payment processing, security and storage; the categories are in our Privacy policy) work in several countries. Where data of people in the EEA, UK or Switzerland goes to a country without an adequacy decision, we rely on standard contractual clauses or an equivalent safeguard where the law requires it.

If you use Pagestro for your business and send documents or invoices to other people, read our Data Processing Addendum.