Privacy Policy

Publication checklist: replace every [[...]] field, confirm the production provider and retention details, obtain legal review, and then change draft to false.

1. Who operates Convert for You

[[LEGAL_ENTITY_NAME]] ("Convert for You", "we", "us", or "our") operates the Convert for You website and document-conversion service at [[PUBLIC_SITE_URL]].

• Privacy contact: [[PRIVACY_CONTACT_EMAIL]]
• Registered address: [[REGISTERED_ADDRESS]]
• Jurisdiction: [[JURISDICTION]]
• Effective date: [[EFFECTIVE_DATE]]
• Minimum age: [[MINIMUM_USER_AGE]]

This policy explains how we process information when you visit the website, use an account, upload or convert documents, connect a cloud drive, use translation or AI features, submit feedback, or otherwise use the service. Third-party services have their own privacy notices.

2. Information we process

Account and authentication

Clerk may provide Convert for You with an account identifier, email address, name, profile information, authentication status, session information, and account tier. We use this information to provide sign-in, apply plan limits, and manage account features.

Conversion jobs and documents

When you submit a conversion, we may process the uploaded files, generated files, rendered pages, extracted text, original filenames, file types, file sizes, page counts, selected options, page ranges, passwords needed for an authorized document operation, job identifiers, status, progress, errors, and timestamps.

Files and job records are temporary processing data, not a personal document archive. Download important results before the job expires.

Device, network, and usage information

We process request timestamps, browser or device information supplied by the browser, feature usage, conversion outcomes, error codes, response status, processing duration, input and output sizes, page counts, and provider usage units. If you grant diagnostics consent, Sentry may receive privacy-filtered browser error events. These events exclude document contents, request bodies, cookies, identity, and user-controlled context.

For abuse prevention and rate limiting, the API derives a keyed hash from the client IP address. The conversion API does not use that hash as a public identifier. Billing checkout may send the client IP address to the configured billing provider.

Feedback and communications

The contact form accepts product feedback from guests and signed-in users. It may contain a category, related tool, message, and an optional email address. Email is used only for manual follow-up when needed. Do not submit passwords, private documents, API keys, or other confidential information through the feedback form.

Billing and subscriptions

When you subscribe, we may receive subscription status, customer and subscription identifiers, product information, payment events, and billing metadata from Polar. Payment-card details are intended to be handled by Polar rather than stored by Convert for You; this must be confirmed against the production provider agreement before publication.

3. Why we use information

We use information to:

1. provide authentication, document conversion, downloads, translation, OCR, webpage rendering, summaries, and related features;
2. create and manage jobs, enforce plan limits, and prevent abuse;
3. process subscriptions, payments, refunds, and entitlement changes;
4. monitor reliability, troubleshoot errors, protect the service, and maintain security;
5. answer feedback and support requests;
6. measure service usage and improve the product only when the required consent has been provided; and
7. comply with legal obligations, enforce our terms, and establish or defend legal claims.

The legal basis for each processing purpose is [[LEGAL_BASIS_BY_JURISDICTION]]. Required and optional processing must be reviewed for every jurisdiction in which Convert for You is offered.

4. Storage and retention

The following are the current application defaults. Replace or confirm them for the production deployment before publication.

The service may use local disk storage or private object storage such as Cloudflare R2. The production policy must identify the storage location, backup deletion process, and authorized support access.

5. Providers and feature-specific sharing

We make information available to providers only when they are needed to operate a requested or enabled feature, or to operate and secure the website.

AI summarization, OCR, translation, webpage rendering, cloud imports, and external advertising may involve a separate provider. Review the feature-specific warning before uploading sensitive material.

6. International transfers

Some providers may process information outside your country. Before publication, complete this table with the destination, data categories, transfer mechanism, and applicable safeguards: [[COMPLETE_INTERNATIONAL_TRANSFER_TABLE]].

7. Cookies and browser storage

Convert for You uses necessary cookies or browser storage for authentication, security, consent preferences, and private administration. Optional advertising and browser diagnostics are disabled until the visitor gives the corresponding consent through the privacy settings interface.

The current inventory is described in the Cookie Policy. Analytics providers are not currently active. The inventory must be updated whenever a provider, script, cookie, or storage key changes.

8. Security

Current safeguards include protected job tokens, keyed IP hashing, private object-storage downloads with temporary links, encrypted job secrets, access-controlled statistics sessions, and automatic cleanup workers. No security measure guarantees absolute security.

Report a suspected security issue through [[SECURITY_CONTACT_EMAIL]]. Do not include confidential documents or credentials in a public feedback submission.

9. Your rights and choices

Depending on applicable law, you may have rights to access, correct, delete, restrict, or port your information; object to certain processing; withdraw optional consent; and complain to a privacy regulator.

Submit a request to [[PRIVACY_CONTACT_EMAIL]]. Before publication, confirm the response period, identity-verification method, exceptions, appeal process, and regulator information for each applicable jurisdiction: [[RIGHTS_PROCESS_BY_JURISDICTION]].

You can change optional advertising, analytics, and diagnostics choices at any time using Privacy settings in the site footer.

10. Children

Convert for You is [[CHILDREN_POSITION]]. The minimum permitted age, parental-consent process, and deletion process for incorrectly collected information must be confirmed before publication.

11. Changes

We will publish the effective date and a short summary for material changes. The controlling version of this policy will be published at [[PUBLIC_PRIVACY_URL]].

12. Contact

• Controller: [[LEGAL_ENTITY_NAME]]
• Privacy contact: [[PRIVACY_CONTACT_EMAIL]]
• Postal address: [[REGISTERED_ADDRESS]]
• Privacy officer or DPO: [[PRIVACY_OFFICER_OR_DPO]]
• Effective date: [[EFFECTIVE_DATE]]