Privacy & Document Retention Policy

1. Ephemeral Document Processing & 15-Minute Automated Wipe

When you submit a Word document (.docx or .doc), it is received directly into an isolated, temporary processing folder tagged with a cryptographically secure, high-entropy UUID.

• Zero Permanent File Storage: Uploaded source files and generated PDF deliverables exist strictly to allow conversion processing and delivery to your browser.
• Automated Garbage Collection: Server-side cleanup routines scan temporary job directories continuously. Any file older than 15 minutes is permanently unlinked and erased from disk.
• Post-Download Purging: Once your browser finishes downloading the converted PDF, the single-use authorization token is consumed, preventing repeated unauthorized access.
• Conversion Microservice Architecture: Depending on infrastructure deployment, document conversion may be processed locally or dispatched via encrypted TLS to a dedicated, isolated conversion microservice (such as Gotenberg running on a secure Virtual Private Server). Regardless of hosting topology, documents are processed ephemerally, never inspected or retained permanently, and purged within the same strict 15-minute lifecycle.

2. No Inspection, Reading, or AI Model Training

We do not inspect, read, review, index, or extract textual or photographic content from your documents. Conversion is performed entirely through automated headless binary routines. Your files are never used to train machine learning models, large language models, or document classification systems.

3. Data Transmission & Transport Encryption

All communication between your device and our web servers occurs over encrypted HTTPS connections using industry-standard Transport Layer Security (TLS). This safeguards data against packet inspection, eavesdropping, and tampering across intermediate networks.

4. Unpredictable Download Tokens

Download endpoints do not expose filesystem directories, user identities, or sequential numeric IDs. Every converted file is referenced exclusively through a cryptographically random authorization token (a 48-character hex string generated via secure server-side entropy). Without this specific token and valid job ID, converted files cannot be addressed, indexed by web crawlers, or downloaded by third parties.

5. Contact Inquiries & Email Delivery Handling

If you submit an inquiry through our Contact Page, we collect only the information you explicitly supply: your name, email address, selected category (such as Bug Report, Tool Feedback, or General Inquiry), and your message text.

• Delivery Channel: Inquiries are transmitted to our support inbox via authenticated, TLS-encrypted email delivery service (Resend API).
• No Public Database Storage: Inquiries are not stored in public web-accessible databases, and your contact information is never sold, leased, or shared with third-party advertisers.
• Retention Scope: Inquiries are kept in our administrative email inbox only for the period required to investigate and resolve your technical inquiry.

6. Analytics, Regional Consent Mode & Local Storage

To monitor website reliability, track technical conversion errors, and optimize device compatibility, we support Google Analytics 4 (Measurement ID: G-WKNGESP96V), an industry-standard web analytics service provided by Google LLC, configured under Google Consent Mode v2.

• Regional Consent Governance: We implement jurisdiction-aware consent handling based on applicable privacy regulations:
  • Prior-Consent Jurisdictions (EEA, UK, Switzerland): In compliance with the EU ePrivacy Directive, GDPR, UK PECR, and Swiss revFADP, Google Analytics is strictly disabled by default. A small, accessible notice is shown on your first visit without blocking file uploads or converter tools. No Google tag scripts (gtag.js) load, and no page view or usage data is sent before you explicitly click Accept Analytics. If you reject or ignore the notice, analytics remains completely disabled.
  • Opt-Out Jurisdictions (US and other applicable regions): Where prior consent is not legally mandated for aggregated first-party operational analytics, Google Analytics operates by default to monitor conversion reliability and system availability. No automatic banner is shown, and visitors may disable analytics at any time via the Cookie Settings link in our footer.
• Detection Method, Limitations & Fail-Safe Fallback: Visitor region is determined using reverse-proxy/CDN geolocation headers (such as Cloudflare cf-ipcountry) and browser timezone heuristics. Because IP-based geolocation and timezone approximations are not universally infallible, our architecture enforces a privacy-first fail-safe: if location cannot be conclusively identified, the system automatically defaults to requiring prior consent.
• Aggregate Usage Information: When analytics is permitted, Google Analytics collects pseudonymized interaction metrics—such as pages visited, device category, operating system, and conversion milestones (upload initiation, success rates, technical error frequency). Uploaded document contents, filenames, download tokens, and contact messages are never collected or transmitted. Google processes data under its Privacy Policy & Terms.
• Reviewing or Changing Your Choice: You can review, modify, or opt out of analytics at any time via the Cookie Settings link in the footer of every page. Opting out immediately updates Google Consent Mode to denied, halts subsequent tracking, and clears Google Analytics cookies (_ga, _ga_*).
• Essential Local Storage: We use browser storage strictly for essential operational functions: theme-preference to persist light/dark mode, and site-consent-v1 to remember your privacy choices.
• Opt-Out Add-on: Visitors may also opt out across all web properties via the Google Analytics Opt-out Browser Add-on.

7. Your Privacy Rights & Inquiries

Because we do not require account registration or retain uploaded documents beyond our 15-minute operational limit, there is no persistent file archive to access, export, or purge. For questions regarding our data practices, or to submit feedback, please reach out via our Contact Page or email us directly at [email protected].

This privacy policy describes our actual engineering controls and operating procedures. It is subject to updates as operational requirements evolve.