pdfmill Terms of Service

At a glance

1. Who we are, and who these Terms are for

These Terms are a contract between you and SHK Tech Consulting LLC, a limited liability company organized under the laws of Wisconsin, doing business as Zenaptic Labs, of 6580 Monona Drive #1029, Monona, WI 53716, United States (“pdfmill”, “we”, “us”).

pdfmill is offered to businesses only. By creating an account or calling the API you confirm that you are acting for a business, trade, craft or profession, and not as a consumer. You also confirm that you have authority to bind the organisation you are acting for. Consumer-protection rules that apply only to consumers — including consumer withdrawal or cooling-off rights — do not apply to this contract. If you want to use pdfmill for personal, non-business purposes, please do not create an account.

By creating an account or calling the API, you accept these Terms.

2. What the service is

pdfmill turns a template and a set of values into a PDF or PNG file. You can use it through the web dashboard, the HTTP API, or the pdfmill n8n community node. You may render a template you have stored with us, or send HTML directly with the request.

The rendered file is returned to you in the response. We do not keep a copy.

3. Accounts and API keys

You sign in with a single-use link sent to your email address. There is no password. The link works once and expires 15 minutes after it is sent.

You are responsible for keeping control of that mailbox, and for everything done under your account. Tell us promptly at support@pdfmill.dev if you believe your account or an API key has been compromised.

Your account has a workspace that holds your templates, API keys and usage count. API keys are shown once, at creation, and are stored only as a SHA-256 hash. We cannot recover a lost key for you. If a key is lost or exposed, revoke it and create a new one.

4. Plans, hard caps, and honest billing

All plans are billed monthly. There is no annual plan.

These are hard caps, not soft ones. When a workspace reaches its monthly document limit, further render requests are refused with HTTP 402 and a QUOTA_EXCEEDED error until the next monthly period begins or you upgrade. The cap is enforced the same way through the dashboard, the API and the n8n node.

We never permit overage and then invoice you for it. There is no overage price, and no mechanism to charge one.

Usage counts documents that were rendered. A refused request is not counted. If our usage store is briefly unavailable, we let the render through without counting it rather than failing your request, so a small number of documents may go unmetered in your favour. Either way, you are never billed more than your plan price.

5. Taxes

All prices are exclusive of taxes. You are responsible for any sales tax, use tax, VAT, GST or similar tax that applies to your purchase, other than taxes on our income.

If you are a business established in the European Union, the supply is treated as a business-to-business supply of electronically supplied services, and you are responsible for accounting for VAT under the reverse-charge mechanism where it applies to you. You must give us accurate tax details, including a valid VAT identification number where you have one, and keep them current. If you give us inaccurate details and a tax authority charges us as a result, you are responsible for that amount.

6. Payment, renewal, and failed payments

Paid plans are billed in advance through Stripe and renew automatically each month until you cancel. Payment details are handled by Stripe; we never receive or store your card number.

If a payment fails, your plan continues during Stripe's retry window and the dashboard shows a clear notice asking you to update your payment method. We do not lock you out silently, and we do not downgrade you without telling you. If payment ultimately fails, the workspace returns to the Free plan and the Free plan's limits.

7. Cancellation and refunds

You may cancel at any time. Cancelling takes you to Stripe's billing portal, and it is exactly as easy as upgrading — no email to us, no phone call, and no retention offer standing between you and the cancel button.

Cancellation stops the next renewal. Your plan continues until the end of the period you have already paid for, and then the workspace returns to the Free plan.

Fees already paid are non-refundable, except where we are required by law to refund them, where we have made a billing error, or where section 12 says otherwise. If you think you have been billed incorrectly, email support@pdfmill.dev and we will investigate and correct it.

8. Your content, and the licence you give us

Your templates, your data and your rendered documents are yours. You keep all rights in them.

You grant us only the narrow, temporary licence needed to do what you have asked: receive your template and data, render the document, and return it to you. That licence lasts for the duration of the request and covers nothing else. We do not use your content to train models. We do not sell it or share it.

We do not store rendered documents, and we do not store the data you send to render them. Both exist only in memory for the duration of the request, and the result streams back in the HTTP response. Nothing is written to disk or object storage, and request payload contents are never logged.

There is one exception, and you control it: sample or example data you save alongside a template in the dashboard is stored with that template version until it is deleted. Do not put real personal data there unless you intend it to be stored.

Deleting a template hides it from your dashboard; the stored versions of that template are retained. Deleting your account removes the workspace, its API keys, its templates and its usage records. Deletion, export and access requests are handled by a person on emailed request — there is no self-service delete button. See section 14 and the Privacy Policy.

You are responsible for the content you render, and for having the right to use it.

9. Acceptable use

The API renders HTML that you supply, so the rules below matter. You may not use pdfmill to:

• produce fraudulent or deceptive documents. This includes invoices, receipts, purchase orders, statements, payslips, bank or account statements, shipping documents, insurance documents, diplomas, certificates, licences, credentials and identity documents that are falsified, backdated, or issued in the name of a person or organisation you are not authorised to represent, or that are intended to deceive anyone about their origin, authenticity or contents;
• impersonate any person or organisation, or misrepresent your affiliation with one;
• infringe anyone's intellectual property, or breach anyone's confidence;
• process personal data without a lawful basis for doing so;
• attempt to reach internal, private or otherwise non-public network addresses through the renderer, or otherwise probe, scan or interfere with our infrastructure. The render engine blocks requests to internal and private addresses, and attempting to defeat that protection is a breach of these Terms;
• upload or render malware, or content designed to harm a recipient's system;
• circumvent plan limits, including by creating multiple accounts to obtain repeated free quota;
• resell raw pdfmill API access as a competing document-rendering API. Using pdfmill inside your own product, to generate documents for your own customers, is expressly permitted and is the intended use.

We may suspend or limit an account that we reasonably believe is breaching this section, or that is causing harm to other users or to our infrastructure. Where the circumstances allow it, we will tell you first and give you a chance to put it right. Where they do not — for example, active fraud or an attack in progress — we may act first and tell you afterwards.

10. Availability

We do not offer a service level agreement, and we do not guarantee uptime. Do not build a process that cannot tolerate a delayed or failed render.

We run a synthetic render probe every hour and repair faults as quickly as we can, but the service is provided as it is, at these prices. If you need contractual uptime commitments, write to us before relying on pdfmill; that would be a different agreement.

11. Changes to the service and to these Terms

We may add, change or remove features. We will not make a change that we know removes a capability you depend on without telling you.

If we make a material change to these Terms, or raise the price of your plan, we will email the address on your account and update the date at the top of this page at least 30 days before the change takes effect. You may cancel before it takes effect. Continuing to use pdfmill after that date means you accept the change.

Prices are not frozen at signup. We may change plan prices, and a change is subject to the 30 days' notice above. To be plain about it: we make no promise that your price will never rise.

12. Termination

You may stop using pdfmill at any time. To have your account and its data deleted, email support@pdfmill.dev; a person handles the request.

We may suspend or terminate your account if you materially breach these Terms, if you do not pay, or if we are required to by law. For non-payment alone, the normal outcome is that the workspace returns to the Free plan rather than being terminated.

Except where you have materially breached section 9 or we must act immediately for legal or security reasons, we will give you at least 30 days' notice before terminating your account, so that you can retrieve what you need. Email support@pdfmill.dev during that period and we will export your templates and account data for you. If we terminate your account for a reason other than your breach, we will refund the unused portion of any fees you have prepaid for the current period.

On termination, your right to use the service ends and your templates and account data are deleted. Sections 5, 7, 8 (ownership), 13, 14, 15, 16 and 17 survive termination.

13. Warranties and limitation of liability

The service is provided “as is” and “as available”. To the fullest extent permitted by law, we disclaim all warranties, whether express, implied or statutory, including any implied warranties of merchantability, fitness for a particular purpose, title and non-infringement. We do not warrant that the service will be uninterrupted, error-free, or that any particular render will succeed or will match your expectations.

To the fullest extent permitted by law:

• Neither party is liable for indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, lost revenue, lost business, or loss of goodwill, however caused, even if advised that they were possible.
• Our total aggregate liability arising out of or relating to these Terms or the service is limited to the total fees you paid us for the service in the 12 months immediately before the event that gave rise to the claim. If you have paid us nothing, our aggregate liability is limited to $100.

These limits do not apply to, and nothing in these Terms excludes or limits, liability that cannot lawfully be excluded or limited. That includes liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, for gross negligence or wilful misconduct, and any other liability that applicable law does not allow to be excluded or limited. It also does not limit your obligation to pay fees you owe us.

Each party is responsible for its own compliance with data protection law, and section 14 governs liability for personal data we process on your behalf to the extent that law requires.

You are responsible for the accuracy and legality of the documents you produce with pdfmill and for how you use them.

14. Data protection — what we commit to as your processor

Where you send us personal data belonging to other people — your customers' names on an invoice, students' names on a certificate — you are the controller of that data and we act as your processor. This section is our processing agreement with you and applies automatically to every customer. It is intended to meet the obligations that GDPR Article 28 and comparable laws place on a processor.

Subject matter and duration. We process personal data in order to provide pdfmill to you, for as long as your account is open, and afterwards only where you ask us to keep something or the law requires it.

Nature and purpose. Rendering documents from a template and the data you supply, storing the templates and any sample data you choose to save, authenticating your users, counting usage to enforce plan limits, and operating and supporting the service.

Types of data and categories of data subject. Whatever you choose to include in a template, in the data you send to render it, or in sample data you save. That is under your control, not ours. Your account holders' email addresses are also processed, so that they can sign in and receive service notices. Please do not send special categories of personal data as defined by GDPR Article 9.

Our commitments:

1. We process only on your documented instructions. These Terms, the Privacy Policy, and the requests you make through the dashboard, the API and the n8n node are your instructions. This includes our processing of the data in the United States. We will not process the data for our own purposes, will not sell or share it, and will not use it to train models. If we are ever legally required to process it otherwise, we will tell you first unless the law forbids us from doing so. If we believe an instruction breaks data protection law, we will tell you.
2. Confidentiality. Everyone we authorise to process the data is bound by a duty of confidentiality. Access to production systems is limited to the operator of the service.
3. Security. We keep appropriate technical and organisational measures in place for the risk. Today these include: TLS for all traffic; not storing rendered documents or the data sent to render them at all — they exist only in memory for the request and stream back to you; never logging request payload contents; storing API keys only as SHA-256 hashes that cannot be reversed; single-use sign-in links that expire in 15 minutes; strictly necessary cookies only; encryption at rest on the managed database; and blocking requests from the render engine to internal and private network addresses.
4. Sub-processors. You give us general authorisation to use the sub-processors listed in the Privacy Policy: Render (hosting), Supabase (database), Stripe (payments), Resend (outbound transactional email), and Forward Email (inbound support email). Each is bound by a written agreement imposing data protection obligations. Before we add or replace a sub-processor we will update the list in the Privacy Policy and email the address on your account at least 30 days beforehand. You may object in writing. If we cannot address your objection, you may cancel your subscription, and we will refund the unused portion of any fees you have prepaid.
5. Data subject requests. If someone contacts us directly about data we hold for you, we will not respond to them on your behalf; we will forward the request to you. We will help you meet your own obligations to that person, taking into account how little we hold: we do not store rendered documents or render payloads, so in most cases the only place their data exists in our systems is a template or sample data you saved.
6. Breach notification. If we discover a personal data breach affecting data we process for you, we will notify you without undue delay after becoming aware of it, with the information we have, and will keep you updated as we learn more, so that you can meet your own notification deadlines.
7. Deletion or return. On termination, or on your written request, we delete the personal data we hold for you. Because we never store rendered documents or the data sent to render them, there is nothing of that kind to return. Templates, saved sample data, account records, API key hashes and usage counts are deleted when your account is deleted. Deletion, export and access requests are carried out by a person on emailed request to support@pdfmill.dev — there is no self-service delete button. We keep records we are required by law to keep, such as billing records for tax purposes.
8. Demonstrating compliance. We will give you the information you reasonably need to show that we meet these obligations, and will answer reasonable written questions about our processing. Requests should go to support@pdfmill.dev.
9. Assistance with your obligations. Taking into account the nature of the processing and the information available to us, we will help you with security, breach notification, and data protection impact assessments where you reasonably ask.

Where the data is processed. In the United States — application and API hosting on Render (Ohio) and a managed Postgres database on Supabase (AWS us-east-2, Ohio). Stripe processes payment data. Accepting these Terms is your instruction to process the data in the United States. If your organisation needs additional transfer documentation, write to support@pdfmill.dev and we will work with you on it.

15. Privacy Policy and precedence

Our handling of personal data is described in the Privacy Policy, which forms part of these Terms.

If there is a conflict, the order of precedence is:

1. Section 14 of these Terms, on anything concerning personal data we process on your behalf;
2. the rest of these Terms;
3. the Privacy Policy.

The Privacy Policy is a description of what we do; where it and these Terms disagree about an obligation, these Terms govern.

16. Governing law and venue

These Terms and any dispute arising out of them or the service are governed by the laws of the State of Wisconsin, United States, without regard to its conflict-of-laws rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Both parties submit to the exclusive jurisdiction of the state and federal courts located in Wisconsin. There is no arbitration clause in these Terms; disputes go to those courts.

Nothing in this section removes any mandatory protection or forum that applicable law gives you and that cannot be excluded by agreement.

17. General

These Terms, together with the Privacy Policy, are the entire agreement between you and us about the service, and replace any earlier understanding about it.

You may not assign these Terms without our written consent. We may assign them to a successor in connection with a merger, acquisition or sale of assets, on notice to you.

If any provision is held unenforceable, the rest stays in force and that provision is applied to the maximum extent permitted.

If we do not enforce a right straight away, that is not a waiver of it.

Neither party is liable for a failure to perform caused by events beyond its reasonable control, other than an obligation to pay.

18. Contact

Email: support@pdfmill.dev — a person reads it.

Postal address: SHK Tech Consulting LLC (dba Zenaptic Labs), 6580 Monona Drive #1029, Monona, WI 53716, United States.