Privacy Policy

1. Who is responsible

The company named at the foot of this page is the controller of the personal data described here. Contact details for privacy questions are the same as the contact details given there.

2. What we deliberately do not collect

The contents of the files you convert are not stored and not inspected. A file is read by the converter, written out in the requested format, and then removed. Nothing about what is inside it is recorded in our database or in our logs.

This is not only a promise about conduct. It is also the reason we cannot restore a file for you after it has expired, and the reason we cannot tell you what a past conversion contained.

3. What we do collect

Account data. The name and email address you register with, and the state of your account.

Billing data. The credits you have bought, the amounts charged and the currency. Payment is taken by a third party payment provider. Full card numbers never reach us.

Conversion metadata. For each job: the source and target format, the file size, the number of credits spent, the time, and whether it succeeded. Not the file, and not its name where the name is not needed to return the result to you.

Technical data. IP address, browser and device information, and server logs. These are used to keep the service running and to detect abuse.

Cookies and similar storage. See section 8.

Anything you send us. The contents of a message you send through the contact form or by email, so that we can answer it.

4. Why we process it, and on what basis

To provide the service. Running conversions, maintaining your balance, and returning results to you. Basis: performance of our contract with you.

To take payment and keep accounts. Basis: performance of the contract, and our legal obligations for tax and accounting records.

To keep the service secure and to prevent abuse. Rate limiting, fraud checks and investigating misuse of the converters. Basis: our legitimate interest in a service that is not being abused.

To answer you. Basis: our legitimate interest in responding to people who write to us.

To improve the service. Aggregate figures about which formats are used and which conversions fail. Basis: our legitimate interest in knowing where the service is weak.

We do not sell personal data and we do not use it for automated decisions that produce legal effects for you.

5. How long we keep it

Files, as set out above, are removed as soon as they are no longer needed to deliver the result to you. The retention period for a finished result is published on the site.

Account data is kept while your account is open, and for a reasonable period after closure so that we can deal with any question about it.

Billing records are kept for as long as tax and accounting law requires.

Technical logs are kept for a short period, long enough to investigate an incident and no longer.

6. Who we share it with

We share personal data only with organisations that process it on our behalf and under contract, and only with what they need:

• The payment provider that takes the charge.
• The infrastructure provider that hosts the service.
• The provider that delivers our transactional email.

We also disclose data where we are required to by law or by a court.

If the business is sold or transferred, data may pass to the buyer, who will remain bound by this policy until it tells you otherwise.

7. Where data is held

Data is processed in the United Kingdom and the European Economic Area. Where a processor operates outside those areas, the transfer is covered by a legal mechanism that gives the data equivalent protection, such as standard contractual clauses or an adequacy decision.

8. Cookies

We use cookies and equivalent browser storage for three things: keeping you signed in, remembering the currency you selected, and recording your cookie preferences so that we do not ask again.

Non essential cookies are set only if you consent, and you can change that choice at any time from the cookie banner.

9. Your rights

Where UK or EU data protection law applies to you, you have the right to ask for a copy of your data, to have it corrected, to have it erased, to restrict or object to how it is used, and to receive it in a portable form. Where we rely on consent, you can withdraw it at any time, which does not affect what was done before you withdrew it.

To exercise any of these, write to the address at the foot of this page. We answer within one month, and tell you if we need longer.

If you are not satisfied with our answer you can complain to the Information Commissioner's Office in the United Kingdom, or to the supervisory authority where you live.

10. Children

The service is not intended for people under 18 and we do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.

11. Changes

We may change this policy. The date at the top of this page is the date of the current version. Where a change is significant, we will make it visible rather than relying on you to notice the date.