Legal
Privacy Policy
Version 1.1 — Last updated June 30, 2026
This Privacy Policy explains what information Feather PDF (the “App”) and its publisher collect, why, what your rights are, and how to contact us. The short version: Feather PDF collects no personal data, and your files never leave your device.
Data controller
The data controller for any personal data processed in connection with the App is SoFloWare LLC (“SoFloWare”), a Wyoming limited liability company (the “Publisher”), with a mailing address at 30 N Gould St Ste R, Sheridan, WY 82801, USA, in Wyoming, United States.
General contact: info@sofloware.com.
EU and UK representatives (Article 27)
The App collects no personal data from users (see “What we collect” below). Because the Publisher does not process personal data of data subjects in the European Union or the United Kingdom through the App — beyond occasional, low-risk processing such as responding to legal correspondence — the Publisher has not designated a representative under Article 27 of Regulation (EU) 2016/679 (“GDPR”) or under Article 27 of the UK GDPR, relying on the exemption in Article 27(2).
For any data-protection matter, including anything you would otherwise raise with an Article 27 representative, contact the Publisher directly at info@sofloware.com.
What we collect
The App collects no personal data and sends nothing about you to the Publisher.
There is no user account, no login, no license server, no activation backend, no advertising SDK, no analytics SDK, no crash-reporting service, and no usage telemetry. The App makes no network calls for its own function — it runs entirely on your device, fully offline.
The Publisher operates no license server, activation backend, or account system. Purchase and entitlement are handled entirely by the Microsoft Store; the Publisher receives only the aggregate sales and diagnostic data Microsoft exposes in Partner Center, which does not identify individual customers.
If a future release adds an optional diagnostics feature (such as opt-in crash reporting or anonymous usage statistics), it will be off by default, will request your explicit consent before anything is sent, and this Privacy Policy will be updated to describe what is collected, the processor used, the retention period, and the legal basis — before the feature is enabled.
What we do not collect
We do not collect, transmit, or store any information about the PDF files you open, their contents, file names, file paths, the text you select, search, or copy, or anything you print. Everything you do in the App stays on your device.
The files you open are read into memory on your computer so the App can display, search, and reorganize them. They are never uploaded to the Publisher or to any third party. Because we collect no information about your documents, we cannot — even when compelled by legal process — disclose their contents to anyone.
Information stored on your own device
For your convenience, the App stores a few small settings locally under your Windows user profile (Windows app local settings). These never leave your device and are never sent to the Publisher:
- your theme preference (light, dark, or system);
- a “recent files” list — the paths of PDFs you have recently opened, so you can reopen them quickly;
- basic first-run / window state flags.
You can clear the recent-files list at any time from the App (Recent → Clear recent), and uninstalling the App removes all of this local data.
Legal bases for processing (GDPR Article 6)
The App does not process personal data on the Publisher’s behalf, so no GDPR legal basis is engaged for in-app processing. The limited processing that does occur:
- Microsoft Store purchase processing → Contract (Art. 6(1)(b)) between you and Microsoft; the Publisher is not the controller for this processing.
- Responding to legal process → Legal obligation (Art. 6(1)(c)) and the Publisher’s legitimate interests in establishing or defending legal claims (Art. 6(1)(f)).
- Any optional diagnostics added in a future release → Consent (Art. 6(1)(a)), requested before the feature is enabled and withdrawable at any time.
Withdrawing any consent you give does not affect the lawfulness of processing carried out before withdrawal.
Retention
- Microsoft Store sales data: retained by Microsoft according to Microsoft’s own data-retention policies.
- App-local data on your device (theme, recent-files list): retained until you clear it within the App or uninstall the App.
The Publisher does not itself retain any personal data about you, because it collects none through the App.
Where data lives and international transfers
App-local data (theme preference, recent-files list) is stored on your device only, under your Windows user profile. It is not transmitted to the Publisher or to any third party. The Publisher makes no automated transfer of your data, inside or outside the EU or UK.
Data security
The App stores its data locally under your Windows user profile and relies on the operating system’s user-account isolation and any device encryption you have enabled (for example, BitLocker). Because the Publisher collects no personal data through the App, there is no server-side store of your personal data to secure.
Data breach notification
In the event of a personal data breach affecting personal data for which the Publisher is the controller, the Publisher will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach, as required by GDPR Article 33. Where the breach is likely to result in a high risk to your rights and freedoms, the Publisher will also notify affected users without undue delay, as required by GDPR Article 34. As described above, the App transmits no personal data to the Publisher, which substantially limits the scope of any such breach.
Your rights (EU GDPR and UK GDPR)
You have the right to:
- Access the personal data the Publisher holds about you (Art. 15);
- Rectify inaccurate personal data (Art. 16);
- Erase your personal data, the “right to be forgotten” (Art. 17);
- Restrict processing in certain circumstances (Art. 18);
- Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller — data portability (Art. 20);
- Object to processing based on legitimate interests (Art. 21);
- Withdraw consent at any time, without affecting prior processing (Art. 7(3));
- Lodge a complaint with a supervisory authority. For EU users, the supervisory authority is the data-protection authority of your country of habitual residence. For UK users, the supervisory authority is the Information Commissioner’s Office (ico.org.uk).
To exercise these rights, email info@sofloware.com. The Publisher will respond within one month, as required by GDPR Article 12(3). For data that lives only on your device (theme, recent-files list), you can clear it yourself from within the App without contacting the Publisher.
Your rights (California — CCPA / CPRA)
Under the California Consumer Privacy Act and California Privacy Rights Act (“CCPA/CPRA”), California residents have rights to know, delete, and correct personal information; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information; and to non-discrimination for exercising any right.
In the twelve months preceding the date of this Privacy Policy, the Publisher has not collected personal information from California residents through the App, has not sold or shared personal information, and has not disclosed personal information to any third party except as necessary to respond to legal process. The App contains no advertising or analytics SDK. There is therefore no sale or sharing to opt out of. To exercise CCPA/CPRA rights, email info@sofloware.com; the Publisher will respond within the time periods required by California law.
Your rights (other U.S. states)
Residents of Colorado, Connecticut, Florida, Montana, Oregon, Texas, Utah, and Virginia have rights under their respective comprehensive privacy laws (CPA, CTDPA, FDBR, MCDPA, OCPA, TDPSA, UCPA, VCDPA) that broadly parallel the CCPA rights above — access, deletion, correction, portability, opt-out of certain processing, non-discrimination. The Publisher honors valid requests from residents of these states on the same terms and through the same email address (info@sofloware.com).
The App vs. this website
This policy distinguishes between the App (the Feather PDF software you install from the Microsoft Store) and this marketing website (feather.sofloware.com). The App collects nothing and makes no network calls, as described above. The website, like most websites, uses a basic analytics tool — described in the next section.
Cookies and web tracking
The App uses no cookies and no web tracking. It embeds no analytics SDK and no advertising SDK, and transmits nothing about you or your files.
This website uses Google Analytics to understand aggregate, anonymous traffic (such as page views and approximate region). Google Analytics sets cookies and processes limited usage data under Google’s own terms; we use it only to improve the site and do not use it to identify you, and we run no advertising. We do not sell or share this data. If you prefer not to be measured, you can block analytics cookies in your browser or use a content blocker, and doing so does not affect the website or the App in any way. IP-anonymization is enabled where supported. This website-analytics processing is entirely separate from the App, which remains fully offline and collects nothing.
Children
The App is not directed at children and the Publisher does not knowingly collect personal data from anyone, including children. If you believe a child has provided personal data through the App, contact info@sofloware.com and we will address it (although, as described above, the App collects no personal data).
Subprocessors
- Microsoft — Microsoft Store distribution, purchase processing, license enforcement, and the diagnostic data Microsoft itself collects under its own terms (independent of the Publisher).
The Publisher engages no other subprocessor for the App’s operation. If a new subprocessor is engaged, this section will be updated and renewed consent will be requested where applicable law requires it.
Marketing
The Publisher does not operate a marketing mailing list, send promotional emails, or run any digital marketing campaign that involves processing your personal data. You will not receive marketing email from the Publisher unless you have separately contacted the Publisher and the email is a direct response to your enquiry.
Updates to this Privacy Policy
The Publisher may revise this Privacy Policy. Material changes will be surfaced in the App and, where required by applicable law, will require renewed consent before processing under the revised terms begins. Non-material clarifications may be made without notice; the “Last updated” date at the top of this document will always reflect the most recent revision.
Questions: info@sofloware.com.