Who we are
ConvertNest is run by [Company legal name and address]. For anything about your data, including deleting your account, write to [contact email].
Your files
Most conversions run entirely in your browser: video, audio, images, GIFs and most PDF tools. Those files never leave your device and we never see them.
Some conversions need software that can't run in a browser: documents to PDF, PDF to Word or JPG, ebooks, archives, PDF passwords and HEIC photos. For those:
- Your file is uploaded over an encrypted connection to our storage in the EU.
- It's converted on our servers in Frankfurt, Germany.
- The original and the result are deleted automatically 2 hours after upload. Cancelling deletes them straight away.
- PDF passwords are used once and wiped as soon as the job finishes.
- Nobody looks at your files, and we never use them for anything except your conversion.
Other data we process
- Your IP address, to apply the free plan's daily limits. It's kept in a counter that expires after about a day.
- A count of today's conversions and any settings presets you save, stored only in your own browser (local storage).
- Standard server logs (time, page requested, errors) to keep the service running and secure. These are kept for up to 30 days.
We don't ask for your name or email to use the free tools, and we don't sell personal data.
Accounts and payments
An account is optional. If you create one, we store:
- your email address, and a securely hashed password if you choose one (we never see the password itself);
- your plan, its renewal date and your Paddle customer and subscription IDs;
- if you sign in with Google, the email address Google shares with us.
Payments are handled by Paddle, who acts as our reseller (merchant of record). Paddle collects your card or PayPal details, address and tax information, and sends invoices. We never see your full card number.
We keep account data until you delete your account. Paddle keeps billing records for as long as tax law requires.
Service providers
We use these companies to run ConvertNest. They process data only on our instructions:
- Cloudflare (R2 storage, EU): temporary storage of uploaded files and results.
- Fly.io (Frankfurt): the servers that convert files.
- Upstash (Frankfurt): the job queue and daily-limit counters.
- Supabase (Frankfurt): accounts, sign-in and your plan.
- Paddle: payments, tax and invoices, as our reseller.
- Google, only if you choose to sign in with Google.
- Our website host, which serves the pages and keeps standard access logs.
- Advertising partners, if you allow advertising cookies. See the cookie policy.
Why we're allowed to do this
We process uploaded files, your account and your subscription to provide the service you asked for (our contract with you), and your IP address to protect the service from abuse (our legitimate interest). Advertising cookies are only used with your consent.
Your rights (GDPR)
If you're in the EU, UK or a similar jurisdiction, you can ask to access, correct or delete your personal data, object to or restrict how we use it, and withdraw consent at any time. Because uploaded files are deleted within 2 hours, we usually hold nothing that can be linked to you.
To make a request, email [contact email]. You can also complain to your local data protection authority.
Children
ConvertNest isn't aimed at children under 16, and we don't knowingly collect their data.
Changes
If we change this policy, we'll update the date at the top of this page. Big changes will be announced on the site.