Privacy policy

This policy explains what personal information ConvertFile (“we”) collects, why, and what you can do about it. The site is run by an independent sole trader based in Victoria, Australia, and we handle personal information in line with the Australian Privacy Principles. You can reach us at any time through the contact page.

What we collect

• Account details if you register: name, email address, a hashed password, and your tool preferences.
• Billing details if you subscribe: Stripe handles your card. We receive a customer reference, subscription status, plan and renewal dates. We never see your full card number.
• Job records for server-processed tools: tool, time, sizes, status and error codes. See how we handle files.
• Usage events: that a tool was started, completed or failed, the tool name, and your plan type. These are not linked to your account or IP address.
• Support messages you send us through the contact form.
• Security data: a keyed hash of your IP address for rate limiting and guest allowances, and your IP address and browser type on login sessions.

Documents

Most tools process files only in your browser, so we never receive them. Files uploaded to server tools are deleted automatically, as described in how we handle files. We don't read, analyse, sell or train models on your documents.

Cookies

• A session cookie keeps you signed in.
• A signed, random guest cookie lets you see the results of server jobs you started without an account.
• Advertising cookies from Google, described below. We don't set any other advertising or cross-site tracking cookies ourselves.
• Google Analytics cookies, which count visits and show which pages and tools are used. They don't identify you to us, and they never see your documents.
• Microsoft Clarity cookies, which link the pages of one visit so we can see where people get stuck. Clarity records clicks, scrolling and page layout. The tool area, recent files, your dashboard and all form fields are masked in your browser before anything is sent, so recordings never include your files, file names or what you type.

Storage in your browser

• Copies of the files a browser tool produces are kept in your browser's own storage (IndexedDB) for 24 hours, so you can download them again from Recent files on the home page. They stay on your device and are never sent to us. You can clear them, or stop them being kept, from the home page or under any result.
• If you turn that off, the setting is saved in your browser's local storage so it sticks.
• If you pick a light or dark theme, that choice is saved in your browser's local storage too.

Advertising

We show ads from Google AdSense on some pages to keep the tools free. Ads never appear inside a tool workspace and never see your documents. Google and its partners use cookies to serve ads based on your visits to this and other websites. Google's use of advertising cookies lets it and its partners serve ads to you based on those visits.

• You can turn off personalised advertising in Google's Ads Settings, or opt out of some third-party vendors' cookies at aboutads.info.
• Read how Google uses information from sites that use its services.
• Visitors in the European Economic Area, the UK and Switzerland are asked for consent before personalised ads are shown.

Who we share with

We use service providers to run the site: hosting, database, file storage, email delivery, Stripe for payments and Google for advertising and visitor statistics and Microsoft for usage recordings. They process information on our behalf. We don't sell personal information.

• Railway hosts the website and its database.
• Cloudflare delivers the site securely and may store files uploaded to server tools until they are deleted.
• Resend sends account emails such as sign-up confirmations and password resets.
• Google serves the ads described above and measures site visits through Google Analytics.
• Microsoft records how pages are used through Clarity, with files and form fields masked.
• Stripe processes payments.

These providers may store or process information outside Australia, including in the United States. We choose providers that protect information to a standard comparable to the Australian Privacy Principles.

How long we keep it

• Account data: while your account exists. Deleting your account removes it, except records we must keep for tax and accounting.
• Job records and usage events: 12 months, then deleted.
• Uploaded files: minutes, not days. See the file-handling page.

Your choices

You can view and change your details in account settings, delete your account there, or ask us for a copy or correction of your information through the contact page. If you have a concern we haven't resolved, you can contact the Office of the Australian Information Commissioner.