Launch notifications
If you sign up, Martin Schrammel AB stores your email address, chosen language, sign-up time and consent version with Cloudflare. With your consent, we use this information for one email when the service opens. Signing up is optional and does not place an order or subscribe you to a newsletter. You can withdraw consent and ask us to delete your information by emailing martin@accessibilitypdf.com. We delete it after the launch notice, or within one year of sign-up. We use short-lived hashes of IP addresses to limit form abuse. Details about providers and your rights appear below.
Who is responsible
Martin Schrammel AB, 559591-7377, Björnsonsgatan 147, 168 43 Bromma, Sweden. martin@accessibilitypdf.com. We are the controller for representative contact details, agreements, order administration, payments, support and service-security data. The customer is responsible for personal data in uploaded PDFs; we process that content under the DPA and direct rights requests about it to the customer.
Information, purposes and legal bases
We use organisation and representative details to identify the contracting party, record the agreement, prepare quotes and deliver orders. For representatives of an organisation the legal basis is our legitimate interest in carrying out and documenting business relationships (Article 6(1)(f)); for sole traders contracting personally, contract necessity applies (Article 6(1)(b)). Accounting records are kept to meet legal obligations (Article 6(1)(c)).
Necessary session identifiers, security events and limited request metadata protect the service against abuse under our legitimate interest. We balance those interests against your rights and minimise data. We do not sell personal data, run advertising profiles or send marketing because you upload a document. AI reviews text and page images for scope before a fixed quote is offered. Code calculates the price. AI also assists production after an order; Martin is responsible for delivery. You can ask for a human explanation or review of a quote.
Recipients and international handling
The provider register describes OpenAI, Anthropic, Cloudflare hosting and storage, Resend, Google Workspace and Stripe. Some processing may occur in the US or elsewhere outside the EEA. Where required, we use an adequacy decision or SCCs with the relevant assessment and safeguards. Ask us for information about the applicable mechanism. Stripe also has independent controller responsibilities. Bokio receives the billing and payment records needed for our accounting, not PDF contents. Accountants, legal advisers or authorities receive information only where needed or legally required.
Retention
Unordered document files expire after 24 hours; unverified orders after seven days; cancelled order files within one day; unpaid previews after 30 days; paid files after 30 days from payment. They are removed by scheduled maintenance. See the DPA for provider and backup exceptions.
Upload agreements that do not result in an order are retained for up to one year to evidence instructions and resolve a complaint. Order agreements and essential correspondence are retained for up to three years after closure for contractual claims, unless an identified dispute requires longer. Records that constitute accounting information are retained for the statutory period, normally through the seventh year after the calendar year in which the financial year ended. This does not include keeping the PDF content. Used or expired access links and expired sessions are cleared. Provider mail, payment and security records follow the applicable provider retention and legal duties.
Your rights and contact
Contact martin@accessibilitypdf.com to request access, correction, deletion, restriction, portability where applicable, or to object to processing based on legitimate interests. We may need proportionate information to verify your identity. We answer within one month, or explain a lawful extension. Data-protection requests are normally free. You may complain to the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.
Organisation and contact details are required for a DPA and when placing an order. They are not required for a quote for documents without personal data. No account is created by the upload agreement. Necessary cookies protect access; the cookie notice explains them.