iLovePDF and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No. iLovePDF states it does not use your content to train, improve or develop its own or any third-party AI models.

Vendor's wording: “ILOVEPDF DOES NOT USE YOUR CONTENT TO TRAIN, IMPROVE, OR DEVELOP ITS AI MODELS OR ANY THIRD-PARTY AI MODELS.”

Source: ilovepdf.comContent and Intellectual Property in AI ToolsSecond source: ilovepdf.comChecked on 19 October 2026

Within the European Economic Area as a general rule, unless the user selected otherwise. Hosting providers include Hetzner (Germany) and Cloudscale (Switzerland).

Vendor's wording: “As a general rule, and except the user has selected otherwise, we process your personal data within the European Economic Area.”

Source: ilovepdf.com5. Do we disclose your personal data to third partiesSecond source: ilovepdf.comChecked on 19 October 2026

EU hosting available.

Yes. Processing is in the EEA by default, and Premium includes "Regional file processing" in 7 regions (regions not named on the pricing page).

Vendor's wording: “Regional file processing 7 regions”

Source: ilovepdf.comPremium plan features, Regional file processingSecond source: ilovepdf.comChecked on 19 October 2026

DPA on request.

Yes. A Data Processing Agreement is attached as Appendix I to the privacy policy and applies when iLovePDF processes your files; no separate signing.

Vendor's wording: “ILOVEPDF will process these personal data only and exclusively to the extent necessary to provide you with the service and the data processing agreement that is attached as Appendix I to this privacy policy will apply.”

Source: ilovepdf.com2. Who is the data controllerSecond source: ilovepdf.comChecked on 19 October 2026

Published.

Yes, public list at https://www.ilovepdf.com/help/privacy/subprocessors (revised 19 Feb 2026): 17 rows, 15 companies. AI provider listed: OpenAI (EU/US).

Vendor's wording: “ILOVEPDF engages the following entities to provide processing activities for Customer Data”

Source: ilovepdf.comThird-Party SubprocessorsChecked on 19 October 2026

EU or Swiss vendor.

Not applicable (EU-based vendor, ILOVEPDF, S.L., Barcelona)

Vendor's wording: “registered office at Calle Sabino de Arana, 60, 08028 Barcelona”

Source: ilovepdf.com2. Who is the data controllerChecked on 19 October 2026

Files are deleted automatically within 2 hours of processing; users can delete earlier from the download screen. Signed documents (iLoveSign) are kept up to 5 years. Account data is kept while you use the service, then blocked and deleted.

Vendor's wording: “all files processed within our platform are automatically and permanently deleted within two hours of being processed.”

Source: ilovepdf.comData Retention and RemovalSecond source: ilovepdf.comChecked on 19 October 2026

ISO/IEC 27001:2022 (1 certification); GDPR compliance claimed and eIDAS qualified trust service providers used for signatures.

Vendor's wording: “iLovePDF proudly holds ISO/IEC 27001:2022 certification”

Source: ilovepdf.comCertifications and complianceChecked on 19 October 2026

€5 / mo.

EUR 5 per month billed annually (EUR 60 per year), or EUR 9 billed monthly; prices include VAT. A selector offers 1 to 25 users.

Vendor's wording: “€5 / month €60 Billed annually ### €9 Billed monthly”

Source: ilovepdf.comPremium plan card and FAQChecked on 19 October 2026