Privacy Policy

Last Updated: January 7, 2025

Your Privacy Matters

We are committed to protecting your privacy and handling your data transparently. This Privacy Policy explains how we collect, use, store, and protect your personal information.

1. Information We Collect

1.1 Information You Provide to Us

When you use Secure File Converter, we collect information that you provide directly to us:

Account Information: Email address, password (encrypted), and optional name when you create an account
Payment Information: Billing details processed securely through Stripe (we do not store your credit card information)
Files You Upload: Documents you upload for conversion (temporarily stored, see Section 3 for retention)
Communications: Messages you send us for support or inquiries

1.2 Information We Collect Automatically

When you use our services, we automatically collect:

Usage Information: Conversion history, file formats converted, conversion timestamps, success/failure status
Device Information: IP address, browser type, operating system, device type
Log Data: Access times, pages viewed, actions taken within our service
Cookies and Tracking: Session cookies for authentication, analytics cookies for service improvement

1.3 Information from Third Parties

If you use OAuth to sign in, we receive:

Google OAuth: Name, email address, profile picture
GitHub OAuth: Username, email address, profile information

2. How We Use Your Information

2.1 To Provide Our Services

Process and convert your uploaded files
Authenticate your account and maintain your login sessions
Track your usage against plan limits (daily/monthly conversions)
Manage your subscription and billing
Provide customer support

2.2 To Improve Our Services

Analyze usage patterns to improve conversion quality
Monitor system performance and identify technical issues
Develop new features and functionality
Conduct research and analytics

2.3 To Communicate With You

Send transactional emails (welcome, password reset, payment confirmations)
Notify you of service updates or security alerts
Respond to your support requests
Send promotional emails (only with your consent, opt-out available)

2.4 For Security and Fraud Prevention

Detect and prevent unauthorized access
Identify and block malicious files or abuse
Enforce our Terms of Service
Comply with legal obligations

3. Data Retention and File Storage

3.1 Uploaded Files

                Important: We Do NOT Permanently Store Your Files
                Uploaded Files: Automatically deleted within 1 hour of upload
Converted Files: Deleted immediately after you download them
Failed Conversions: Input files deleted within 1 hour

            

3.2 Account Information

Active Accounts: Retained while your account is active
Deleted Accounts: Personal information deleted within 30 days of account deletion
Conversion History: Metadata (file size, formats, timestamps) retained for 12 months for analytics; no file content stored
Payment Records: Retained for 7 years for tax and accounting compliance

3.3 Legal Retention

We may retain certain information longer if required by law, for fraud prevention, or to resolve disputes.

4. How We Share Your Information

4.1 Third-Party Service Providers

We share information with trusted service providers who help us operate our business:

Stripe: Payment processing (name, email, billing information)
SendGrid/Email Provider: Transactional emails (email address, name)
Google Cloud/Hosting Provider: Infrastructure hosting (usage data, logs)
Google AdSense: Advertising for free tier users (browsing data, cookies)

All third-party providers are contractually obligated to protect your data and use it only for specified purposes.

4.2 OAuth Providers

If you sign in with Google or GitHub, they may receive confirmation that you used their service to authenticate with us.

4.3 Legal Compliance

We may disclose your information if required by law, court order, or government request, or to:

Comply with legal obligations
Protect our rights, property, or safety
Prevent fraud or abuse
Enforce our Terms of Service

4.4 Business Transfers

If we are acquired, merge with another company, or sell assets, your information may be transferred to the new entity.

4.5 What We Don't Do

❌ We do NOT sell your personal information to third parties
❌ We do NOT share your uploaded files with anyone
❌ We do NOT use your files for training AI models
❌ We do NOT read the contents of your files (except for automated conversion processing)

5. Cookies and Tracking Technologies

5.1 Types of Cookies We Use

Essential Cookies: Required for authentication and security (cannot be disabled)
Analytics Cookies: Help us understand how users interact with our service
Advertising Cookies: Used by Google AdSense for free tier users

5.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using our service.

6. Your Privacy Rights

6.1 General Rights

You have the following rights regarding your personal information:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your account and data
Portability: Receive your data in a machine-readable format
Objection: Object to certain processing of your data
Restriction: Request limitation of data processing

6.2 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

Right to withdraw consent at any time
Right to lodge a complaint with your local data protection authority
Right to know the legal basis for processing your data

6.3 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to know if your information is sold or disclosed
Right to say no to the sale of personal information (we do not sell data)
Right to deletion
Right to non-discrimination for exercising your rights

6.4 Exercising Your Rights

To exercise any of these rights, contact us at: [email protected]

We will respond to your request within 30 days.

7. Data Security

7.1 Security Measures

We implement industry-standard security measures to protect your information:

Encryption: HTTPS/TLS encryption for all data in transit
Password Security: Bcrypt hashing for passwords (never stored in plain text)
Access Controls: Restricted access to personal data on a need-to-know basis
Rate Limiting: Protection against brute force attacks and DDoS
File Validation: Malware scanning and file type validation
Secure Infrastructure: Regular security updates and monitoring

7.2 No Absolute Security

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

Secure File Converter is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

If you are a parent or guardian and believe your child has provided us with information, please contact us at [email protected].

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including The United States of America. These countries may have different data protection laws.

We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy, including:

Standard contractual clauses approved by the European Commission
Compliance with Privacy Shield principles (where applicable)
Ensuring third-party providers have adequate data protection measures

10. Marketing Communications

We may send you promotional emails about new features, special offers, or other information we think you might find interesting.

Opt-Out: You can unsubscribe from marketing emails at any time by:

Clicking the "unsubscribe" link in any promotional email
Updating your preferences in your account settings
Emailing us at [email protected]

Note: You cannot opt out of transactional emails (password resets, payment confirmations) required for the service.

11. Third-Party Links

Our service may contain links to third-party websites (e.g., Stripe, Google). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

Notification: We will notify you of material changes by:

Posting the updated policy on this page with a new "Last Updated" date
Sending an email to your registered email address
Displaying a notice in our service

Continued Use: Your continued use of our service after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Secure File Converter
Todd Mangile
Email: [email protected]
Support: [email protected]

14. Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at:

Email: [email protected]

15. Legal Basis for Processing (GDPR)

For users in the EEA, we process your personal data under the following legal bases:

Contract Performance: Processing necessary to provide our service (account management, file conversion, billing)
Legitimate Interests: Improving our service, fraud prevention, security
Consent: Marketing communications, optional cookies
Legal Obligation: Compliance with laws, tax requirements