Privacy Policy

Convert It processes information you provide when you create or use an account, including your email address, first and last name, optional company name, membership level, and account or authentication identifiers. Supabase provides Convert It’s passwordless authentication; Convert It does not ask you to create a password for the service.

Convert It also processes files you intentionally upload, the settings needed to perform a requested conversion, and the resulting files.

When you request customer support, Convert It processes the request details and any optional supported screenshots, images, or PDFs you choose to attach.

Uploaded files may be temporarily stored in private Supabase storage and processed by Convert It’s DigitalOcean worker infrastructure. Server-side conversion tools validate and process supported files; processing is not limited to your browser.

Access to private files is controlled through server-authorized uploads, access controls, and time-limited links where appropriate. Convert It is a conversion service, not a permanent backup service.

Converted files and user-visible conversion history are retained for up to 7 days for registered Free accounts and 14 days for Plus accounts and 30 days for Pro accounts. Videos expire after 24 hours on Plus or 48 hours on Pro. Existing file expiration timestamps remain unchanged when plans change. Anonymous conversion outputs are temporary and use the current 7-day service retention window. Files may be removed earlier for security, abuse prevention, technical cleanup, or when you delete retained conversion history.

Those file-retention windows do not automatically delete account records, limited Stripe billing records, quota or usage records, receiver or send history, or security and operational records. Those categories may be kept for as long as reasonably needed to operate, secure, troubleshoot, document, or comply with obligations relating to the service.

Support attachments do not use conversion-file retention windows. They are retained privately with the associated support-request history until a future administrative or retention process removes the request and its attachments.

The Delete All Conversion History control removes your retained converted files and their user-facing history from Convert It storage and account views. It does not delete your account, Stripe records, quota or usage history, delivery or receiver history, or security and operational records.

When you share or send a converted file, Convert It may process the recipient email address and retain receiver, send, and operational delivery history needed to provide and protect that feature. Receiving a file is not marketing consent and does not subscribe a recipient to marketing. Any marketing-consent record is separate from file-delivery history.

Stripe processes payment information for Convert It Pro. Convert It does not collect or store full payment-card details. Convert It stores limited billing identifiers and subscription state needed to manage access, such as Stripe customer, subscription, and price references, subscription status, billing period information, and cancellation state.

Stripe operates under its own privacy practices; Convert It does not control those practices.

Supabase sends passwordless authentication and account messages. Resend is used for applicable application messages, including file-sharing delivery. These providers process the information needed to send those messages.

Convert It may process limited technical information for authentication, quota enforcement, abuse prevention, security, troubleshooting, and service operation. This may include device identifiers, IP-derived values, request or job identifiers, timestamps, status information, and operational logs. Convert It does not currently use advertising or behavioral-tracking analytics in the application.

Convert It uses browser local storage for the Supabase authentication session and necessary application state. It also maintains a service device identifier in local storage and a necessary same-site cookie to support anonymous quota and abuse controls. The current application does not set advertising or marketing-tracking cookies.

Convert It uses Supabase for authentication, database, and private file storage; DigitalOcean for conversion processing infrastructure; Stripe for subscription billing; and Resend for applicable application email. These providers process information as needed to provide their respective services and under their own terms and privacy practices.

Information may be processed in countries or regions where Convert It’s service providers operate. Data-protection rules in those locations may differ from those where you live; this policy does not claim a specific data-residency location.

Convert It uses reasonable technical and operational safeguards, including private storage where implemented, access controls, server-side credentials, database row-level security, role-based authorization, signed access links, and encrypted transport. No service can guarantee absolute security.

You may update supported profile information and delete retained conversion history through Account Settings. Depending on where you live, you may have rights to request access to, correction of, or deletion of certain personal information, or to ask other privacy questions. These rights and available exceptions vary by jurisdiction.

As stated in the Terms of Service, you must be legally capable of accepting the Terms or use Convert It with authorization from a parent, guardian, or organization that can accept them for you. Convert It is not knowingly directed to children. A specific minimum age and jurisdiction-specific parental-consent approach have not yet been finalized.

Convert It may update this Privacy Policy as the service or applicable requirements change. The page will show the month of the latest update, and material changes should receive notice appropriate to the service and applicable law.

Convert It has not yet established an authoritative privacy contact email or legal mailing address in repository configuration. A monitored privacy contact and legal identity must be published before this operational draft is treated as a final public policy.