Privacy Policy

1. Introduction

Welcome to ConvertEverything.io ("we," "our," "us," or the "Service"). We are committed to protecting your privacy and handling your personal information with care and respect. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our file conversion services through our website, mobile applications (iOS and Android), API, or MCP (Model Context Protocol) server.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: When you create an account, we collect your email address and a securely hashed version of your password. We never store passwords in plain text.
• Profile Information: You may optionally provide additional information such as your name or preferences.
• Payment Information: When you subscribe to a paid tier, payment information is collected and processed securely by our third-party payment processor, Stripe. We do not store your full credit card details on our servers.
• Files You Upload: We temporarily store files you upload for conversion. These files are automatically deleted based on your subscription tier's retention period (see Section 6).
• Support Communications: When you contact our support team, we collect the information you provide in your communications.

2.2 Information Collected Automatically

• Usage Data: We collect information about your interactions with our Service, including conversion history, file formats used, and feature usage.
• Browser Fingerprint: For non-authenticated users, we create a browser fingerprint to track conversion limits and provide continuity across sessions. This fingerprint is derived from browser and device characteristics and does not identify you personally.
• Device Information: We collect information about the device you use to access our Service, including device type, operating system, and browser type.
• Log Data: Our servers automatically record information when you use our Service, including IP addresses (anonymized), access times, pages viewed, and the page visited before navigating to our Service.

2.3 Mobile Application Data

When you use our mobile applications (iOS or Android), we may collect additional information:

• Device Identifiers: Anonymous device identifiers for analytics and to maintain conversion limits across sessions
• Push Notification Tokens: If you enable push notifications, we collect tokens to send you conversion status updates
• App Usage Analytics: Information about how you interact with the app, including screens viewed, features used, and conversion patterns
• Crash Reports: Diagnostic data when the app crashes, including device state and error logs, to help us improve app stability
• Local Storage: Files you select for conversion are temporarily stored on your device until upload is complete

Our mobile apps do not access your contacts, location, microphone (except for optional voice note conversion), or other sensitive device features without your explicit permission.

2.4 API and MCP Server Data

When you use our API or MCP (Model Context Protocol) server:

• API Keys: We store and log API key usage to authenticate requests, enforce rate limits, and track usage for billing purposes
• Request Metadata: We log API requests including timestamps, endpoints called, file sizes, conversion formats, and response times
• IP Addresses: IP addresses of API requests for security monitoring and rate limiting
• MCP Context: When using our MCP server with AI assistants, we may receive context about the conversion request from the AI platform, but we do not access or store your conversations with the AI assistant

2.5 Analytics and Cookies

We use Google Analytics 4 (GA4) to understand how users interact with our Service and to improve user experience. Google Analytics collects information such as:

• Pages you visit and features you use
• Time spent on pages
• Conversion paths and user flows
• General location (city/country level, not precise)
• Device and browser information
• Traffic sources and referrers

Cookies: We use cookies and similar tracking technologies to track activity on our Service. Cookies are files with a small amount of data which may include an anonymous unique identifier. The cookies we use include:

• Essential Cookies: Required for authentication and security features
• Analytics Cookies: Used by Google Analytics to understand user behavior (you can opt out - see Section 8)
• Preference Cookies: Remember your settings and preferences

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve our file conversion services
• Account Management: To create and manage your account, authenticate you, and provide customer support
• Payment Processing: To process transactions and manage subscriptions through our payment processor, Stripe
• Service Communications: To send you technical notices, updates, security alerts, and administrative messages
• Analytics and Improvement: To understand how users interact with our Service, identify usage patterns, and improve features and user experience
• Security: To detect, prevent, and address technical issues, fraud, and abuse
• Legal Compliance: To comply with legal obligations and protect our rights
• Rate Limiting: To enforce usage limits based on your subscription tier and prevent abuse

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Third-Party Service Providers

• Stripe: Payment processing and subscription management for web purchases. See Stripe's Privacy Policy at https://stripe.com/privacy
• Apple App Store: For iOS app distribution and in-app purchases. See Apple's Privacy Policy at https://www.apple.com/legal/privacy
• Google Play Store: For Android app distribution and in-app purchases. See Google's Privacy Policy at https://policies.google.com/privacy
• Google Analytics: Analytics and usage tracking to improve our Service. See Google's Privacy Policy at https://policies.google.com/privacy
• Cloud Storage: We use Cloudflare R2 for secure file storage. Your files are encrypted and stored on Cloudflare's global infrastructure. Downloads are served from files.converteverything.io using secure, time-limited download tokens.
• Google AdSense: For non-subscribed users, we display advertisements through Google AdSense. See Google's Privacy Policy for information on how Google uses data from sites that use their services.
• Firebase (Mobile): We use Firebase for mobile app analytics and crash reporting. See Firebase's Privacy Policy at https://firebase.google.com/support/privacy

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), including to:

• Comply with legal obligations
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users or the public

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Service before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS
• Encryption of sensitive data at rest
• Secure password hashing using industry-standard algorithms
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Automated malware scanning of uploaded files

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6. Data Retention and Deletion

6.1 Uploaded Files

Files you upload for conversion are automatically deleted based on your subscription tier:

• Non-members: 6 hours after upload
• Basic (Free): 24 hours after upload
• Bronze: 7 days after upload
• Silver: 15 days after upload
• Gold: 30 days after upload

You can also manually delete your files at any time before the automatic deletion period.

6.2 Account Data

We retain your account information and conversion history for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or security purposes.

6.3 Analytics Data

Analytics data collected through Google Analytics is retained according to Google's data retention policies. We have configured our Google Analytics settings to automatically delete user and event data after 14 months.

6.4 Download Tokens

When you request to download a converted file, we generate a secure, one-time download token that is stored temporarily (up to 1 hour) and automatically deleted after use or expiration. These tokens do not contain personally identifiable information.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

You have the right to access your personal information and request a copy of your data in a portable format. You can view your account information and conversion history through your account dashboard.

7.2 Correction

You have the right to correct inaccurate or incomplete personal information. You can update your account information at any time through your account settings.

7.3 Deletion

You have the right to request deletion of your personal information. You have two options:

• Self-service deletion: If you can access your account, go to Settings → Danger Zone to delete your account and all associated data immediately.
• Request deletion: If you cannot access your account, visit our Data Deletion Request page to submit a request.

We will process deletion requests within 30 days and confirm completion via email.

7.4 Objection and Restriction

You have the right to object to or request restriction of certain processing of your personal information.

7.5 Withdrawal of Consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

8. Cookie Management and Analytics Opt-Out

You have several options to manage cookies and opt out of analytics tracking:

8.1 Browser Settings

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or delete certain cookies. Note that if you disable cookies, some features of our Service may not function properly.

8.2 Google Analytics Opt-Out

You can opt out of Google Analytics tracking by:

• Installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
• Enabling "Do Not Track" in your browser settings (we honor DNT signals)
• Using privacy-focused browser extensions or browsers

8.3 Advertising Opt-Out

For information on how to opt out of personalized advertising, visit https://optout.aboutads.info/ or https://www.youronlinechoices.com/

9. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside the United States and choose to provide information to us, please note that we transfer the data to the United States and process it there.

By using our Service, you consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy.

10. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will delete such information from our systems.

11. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to request information about the personal information we have collected about you in the past 12 months.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt out of the sale of your personal information. Note: We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, please contact us at [email protected] or call us at [Phone Number]. We will verify your identity before processing your request.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your personal information includes: (1) your consent, (2) performance of a contract with you, (3) compliance with legal obligations, and (4) our legitimate interests in providing and improving our Service.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy. For significant changes, we will provide a more prominent notice (such as an email notification).

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Support: [email protected]
• Website: https://converteverything.io/contact

We will respond to your inquiry within 30 days.