Privacy policy
ConvertPDF processes your documents only to do what you asked, on servers we operate, and deletes them within one hour. This policy explains exactly what data we handle, why, who helps us, how long we keep it and what you can ask of us.
Last updated: 24 September 2026
Who is responsible
The controller of your personal data is PC7, Primož Cigoj s.p., Cesta Andreja Bitenca 68, 1000 Ljubljana, Slovenia. For anything about privacy or your data, write to [email protected].
Your documents
When you run a tool, the files you choose are uploaded over an encrypted, single-use link to private storage (Cloudflare R2) and processed by our own conversion workers on servers we operate in the European Union. We use them only to produce the result you asked for.
- Documents and results are deleted within one hour of the job finishing, whether or not you downloaded the result. You can delete a job earlier.
- Documents are never sent to external conversion or AI services, never used to train models and never read by people.
- File names, document text and download links are kept out of our logs and analytics.
- Text inside your documents is treated as data only. Instructions written in a document are never acted on.
What else we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| Account details: email address, name and, if you sign in with Google, your Google account ID and profile picture | To create and secure your account and sign you in | Contract |
| Sign-in codes, stored only as a hash | Passwordless sign-in by email; codes expire within minutes | Contract |
| Job records: which tool ran, when, status, page count, file sizes and duration, and the country derived from your IP address | To run jobs, show your history, enforce daily limits and keep the service reliable | Contract and legitimate interest |
| Network data: your IP address, processed as a keyed hash for limits | To prevent abuse and keep free limits fair | Legitimate interest |
| API keys and connected apps: keys stored only as hashes, plus which apps (such as ChatGPT or Claude) you connected and when | To let you use ConvertPDF from other apps and to let you disconnect them | Contract |
| Usage statistics: pages visited and events such as a tool being used, without document content | To understand which tools help people and improve them | Legitimate interest |
| Technical logs: request times, errors and status codes, without document names or content | Security, debugging and keeping the service running | Legitimate interest |
We do not sell personal data, show ads or build advertising profiles.
Using ConvertPDF from ChatGPT, Claude and other apps
If you connect ConvertPDF to an assistant such as ChatGPT or Claude, you sign in to ConvertPDF and approve the connection. That app can then run ConvertPDF tools on files you give it and receive the results. It cannot see your other files, your history on this site or your sign-in details. What the app itself does with your conversation is governed by that provider's own privacy policy. You can disconnect any app under My account → API and MCP at any time.
Who processes data for us
- Hetzner Online (Germany): servers that run the website and the conversion workers.
- Cloudflare: content delivery and protection, private file storage (R2), a privacy-preserving bot check for visitors without an account (Turnstile), and routing of email sent to our addresses.
- Mailgun (EU region): sending sign-in codes and account emails.
- Google: only if you choose to sign in with Google.
- Discord: internal notifications to our team about new sign-ups, completed and failed jobs, which may include your name or email address and country, never documents.
- Stripe: payment processing for Pro and credit packs. Stripe receives your email address and payment details; we keep only Stripe’s customer, subscription and payment identifiers and never see or store card details.
Usage statistics are collected with analytics software we host ourselves. Some of these providers may process data outside the European Union; where they do, transfers rely on the European Commission's standard contractual clauses or an adequacy decision.
How long we keep data
- Documents and results: deleted within one hour of the job finishing.
- Sign-in codes: deleted once expired, within an hour.
- Job records: 12 months, then deleted automatically.
- Technical logs: 14 days.
- Account details, API keys and app connections: while your account exists. When you ask us to delete your account, we delete them within 30 days.
Cookies
We use only cookies needed for the site to work: a session cookie that keeps you signed in and remembers your free usage, and a security token that protects forms. Your theme choice is stored in your browser. We use no advertising or cross-site tracking cookies, so there is no cookie banner.
Your rights
You can ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to its processing, or to receive it in a portable format. Write to [email protected]; we reply within 30 days. You can also complain to the Slovenian Information Commissioner (Informacijski pooblaščenec, ip-rs.si) or the data protection authority where you live.
Children
ConvertPDF is not directed at children under 16, and we do not knowingly collect their personal data.
Changes
If we change how we handle data, we update this page and the date above. Significant changes are announced on the site before they take effect.