Privacy Policy
Last updated: August 26, 2025
PDFConvert.it is committed to protecting your privacy and handling your data with transparency and security. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding your data.
1. Information We Collect
1.1 Information You Provide Directly
When you create an account on PDFConvert.it, we collect:
- Username: A unique identifier you choose for your account
- Email Address: Required for account verification, password recovery, and service communications
- Password: Stored using industry-standard cryptographic hashing (bcrypt). We never have access to your plain-text password
- Subscription Information: If you subscribe to the Business tier, payment processing is handled by Stripe. We store only your subscription status, tier level, and anonymized subscription ID - never your payment card details
1.2 Information Collected Automatically
When you use PDFConvert.it, our systems automatically log certain technical information necessary for service operation and security:
- Conversion Metadata: Original filename, file size, file type, target format, conversion timestamp, and success/failure status. This metadata helps you track your conversion history and helps us improve conversion quality. Important: We never store the actual file contents, only metadata about the conversion process
- IP Address: Logged temporarily for security purposes including DDoS prevention, fraud detection, and abuse mitigation. IP addresses are not permanently retained beyond security log retention periods (typically 30 days)
- Browser and Device Information: User agent string, operating system, browser type and version, screen resolution, and device type. This helps us optimize the interface for different devices and troubleshoot compatibility issues
- Usage Analytics: Anonymous statistics about page views, feature usage, and conversion volume trends to understand how users interact with our service and prioritize feature development
1.3 Third-Party Advertising Data Collection
Google AdSense (Free Tier Users Only): PDFConvert.it displays Google AdSense advertisements to users on the free tier to support the service. Google AdSense uses cookies and similar tracking technologies to serve personalized advertisements based on your interests. This data collection is controlled by Google, not PDFConvert.it.
What Google AdSense May Collect:
- Cookie identifiers and device advertising IDs
- IP address and approximate geographic location
- Pages visited on PDFConvert.it and time spent on pages
- Ad interactions including views and clicks
- Data from other websites you visit (part of Google's advertising network)
Managing Ad Preferences: You can control ad personalization through Google's Ad Settings or opt-out of personalized advertising through the Digital Advertising Alliance. Alternatively, upgrade to the Business tier ($5/month) for a completely ad-free experience with no advertising tracking whatsoever.
Note: Business tier subscribers never see advertisements and are not subject to any advertising data collection. Google AdSense tracking only applies to free tier users.
2. Document and File Processing Privacy
Zero File Retention Architecture: PDFConvert.it is designed from the ground up with privacy as the foundational principle. Unlike many file conversion services, we implement a zero-retention architecture where file persistence is physically impossible.
2.1 How We Handle Your Files
- In-Memory Processing Only: All file conversions happen entirely in volatile server RAM (random access memory). Files are never written to permanent storage, databases, or hard drives. When the conversion completes or the server process ends, the file data is permanently erased from memory
- Automatic Immediate Deletion: Upon conversion completion or if an error occurs, uploaded files and converted outputs are immediately purged from server memory. There is no storage to access, backup, or recover - files are gone permanently within seconds of processing
- No Logging of File Contents: We log conversion metadata (filename, size, format, success/failure) for your conversion history, but never the actual document contents, text, images, or any information contained within your files
- No Third-Party File Access: Your files are processed exclusively on PDFConvert.it servers. We do not send files to third-party services, cloud storage providers, or external APIs (except Google Cloud Translation for Business tier translation feature, which also immediately deletes files after processing)
- No Backups or Retention: There are no backup systems, archival processes, or data retention periods for file contents. We cannot recover your files even if you request it, because they physically do not exist after conversion
2.2 Translation Service File Handling (Business Tier Only)
Business tier document translation uses Google Cloud Translation API. Files sent for translation are transmitted securely to Google's servers, processed for translation, and immediately deleted by both Google and PDFConvert.it after the translated output is returned. Google does not retain translation content for advertising or other purposes under our enterprise API agreement.
3. How We Use Your Information
We use collected information solely for the following legitimate purposes:
- Service Provision: To operate the PDF conversion and translation services, process your files, and deliver converted outputs
- Account Management: To authenticate your identity, manage your account settings, and process subscription payments through Stripe
- Communication: To send essential service emails including account verification, password resets, conversion completion notifications, and subscription confirmations. We never send marketing emails without explicit opt-in consent
- Service Improvement: To analyze usage patterns, identify popular features, diagnose technical issues, and prioritize development of new capabilities based on actual user needs
- Security and Fraud Prevention: To detect and prevent abuse, unauthorized access, DDoS attacks, spam, and fraudulent activity that threatens service availability or user security
- Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests when legally required
4. Information Sharing and Disclosure
We do not sell, rent, trade, or otherwise monetize your personal information. Ever. Your data is yours, not a product we market to advertisers or data brokers.
We may share information only in these limited circumstances:
- With Your Consent: When you explicitly authorize us to share specific information for a particular purpose
- Service Providers: With trusted third-party providers who help us operate the service:
- Stripe for payment processing (Business subscriptions)
- Google Cloud Translation API for document translation (Business tier only)
- Google AdSense for advertising display (free tier only)
- Email service providers for transactional emails
- Legal Requirements: When required by law, court order, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to:
- Comply with legal obligations
- Protect and defend PDFConvert.it's rights or property
- Prevent or investigate possible wrongdoing related to the service
- Protect the personal safety of users or the public
- Business Transfers: If PDFConvert.it is involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will notify you via email and/or prominent notice on our website before such transfer occurs and your data becomes subject to a different privacy policy
5. Data Security Measures
We implement comprehensive technical and organizational security measures to protect your information:
- Encryption in Transit: All data transmission between your browser and our servers uses HTTPS with TLS encryption, preventing interception or eavesdropping
- Encryption at Rest: Database-stored information (account details, metadata) is encrypted using industry-standard encryption algorithms
- Password Security: Passwords are hashed using bcrypt with per-user salts, making them computationally infeasible to reverse even in the unlikely event of database compromise
- Access Controls: Strict access controls limit who can access user data. Production systems require multi-factor authentication and logging of all access attempts
- Regular Security Audits: Periodic security reviews, dependency updates, and vulnerability scanning to identify and remediate potential security issues
- Infrastructure Security: Servers hosted with reputable providers employing physical security, network isolation, firewalls, and intrusion detection systems
Important: No security system is completely impenetrable. While we implement extensive safeguards, we cannot guarantee absolute security. Please use strong, unique passwords and never share your account credentials.
6. Your Privacy Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete personal data
- Deletion: Request deletion of your account and associated personal information (conversion history metadata will be anonymized but retained for analytics)
- Data Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing of your personal information for specific purposes
- Restriction: Request restriction of how we process your data
- Withdraw Consent: Withdraw previously given consent for data processing (e.g., account deletion)
To exercise these rights, contact us through the DMCA contact form or email support. We will respond within 30 days of receiving your request.
7. Cookies and Similar Technologies
PDFConvert.it uses cookies (small text files stored on your device) for essential site functionality and analytics:
- Essential Cookies: Required for basic functionality including session management for logged-in users, security features, and remembering your consent preferences. These cannot be disabled without breaking core site functionality
- Analytics Cookies: Help us understand how users interact with the site, which features are popular, and where users encounter problems. This data is anonymized and aggregated
- Advertising Cookies (Free Tier Only): Google AdSense places cookies to serve personalized ads. These cookies track your browsing across the web to build interest profiles for ad targeting. Business tier users never receive advertising cookies
You can control cookie settings through your browser preferences. Note that blocking essential cookies will prevent you from using certain features like account login.
8. Data Retention
- Account Information: Retained for as long as your account remains active. Deleted accounts have personal information removed within 30 days
- Conversion History Metadata: Retained indefinitely for your reference. Anonymized after account deletion for aggregate analytics
- Security Logs: IP addresses and security-related logs retained for 30 days
- File Contents: Never retained. Deleted immediately after conversion completion
9. Children's Privacy
PDFConvert.it is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately. Parents or guardians who believe their child has provided information should contact us through the DMCA contact form.
10. International Data Transfers
PDFConvert.it operates servers in multiple regions. Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your jurisdiction. By using our service, you consent to transfer of your information to our facilities and service providers globally.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:
- Updating the "Last Updated" date at the top of this policy
- Sending email notification to registered users (for significant changes)
- Displaying a prominent notice on the website
Your continued use of PDFConvert.it after policy changes indicates acceptance of the updated terms.
12. Contact Us
For privacy-related questions, data access requests, or to exercise your privacy rights, please contact us through our DMCA contact form. We will respond to your inquiry within 30 days.
Privacy Commitment
PDFConvert.it was built on the principle that your documents are yours alone. We will never sell your data, we will never store your files, and we will always be transparent about what information we collect and why. Your privacy is not a premium feature - it's a fundamental right we protect for every user, free or paid.