Privacy Policy

Last updated: 25 September 2026

The short version: your files are processed by your browser and never sent to our servers. This page covers everything else — the account data we do hold, the analytics we run, and the one narrow exception (PDF citation lookups) where a small piece of data is sent to a third party.

1. Your files

Every conversion and editing tool runs entirely in your browser using WebAssembly and JavaScript. The files you convert, edit, or sign are never transmitted to ConvertHub's servers, stored by us, or seen by anyone at ConvertHub. See How it works for how to verify this yourself.

The one disclosed exception: the reference-format converter's PDF-to-citation tool looks up a DOI found in the PDF against CrossRef's public API to fetch accurate title/author/journal data. Only the DOI string is sent — never the PDF or its contents. Every other tool never makes an outbound request with your file data, and this is enforced by the site's Content-Security-Policy, not just stated as a promise.

2. Account data

If you create an account, we store your email address and, if you choose to add one, a display name. Sign-in is passwordless — we email you a one-time link rather than storing a password. We do not store payment card details; those are held by our payment processor.

Saved signatures, recent-tool history, and preferences are stored locally in your browser (localStorage / IndexedDB), not on our servers, unless you are signed in and have explicitly enabled cross-device sync for that data on a paid plan.

3. Payment information

Pro and Day Pass purchases are billed through a third-party payment processor (Stripe). We receive and store only the minimum needed to manage your subscription — plan type, billing status, and the last four digits and expiry of your card for display purposes. Full card details never reach our servers.

4. Analytics

We collect aggregate, page-level analytics — which pages are visited, in what volume, from roughly which region — to understand what to build next. We do not log file names, file contents, or anything you type into a tool. Analytics data is not sold or shared with third parties for advertising.

5. Cookies

We use a minimal, functional cookie or local-storage flag to remember your theme preference and, if you're signed in, your session. We do not use third-party advertising or cross-site tracking cookies. See the Cookie Policy for the full list.

6. The browser extension

The ConvertHub browser extension requests only the permissions needed to read a file you explicitly choose to convert, using the same in-browser engines as the website. It does not read your browsing history, other tabs, or any data beyond the file you act on.

7. Data retention and deletion

Account data is retained for as long as your account is active. You can export your account data or delete your account at any time from Data & storage. Deleting your account removes your email, name, and billing record from our systems within 30 days; it does not affect files already saved to your own device, since we never had a copy of them.

8. Children's privacy

ConvertHub is not directed at children under 13, and we do not knowingly collect account data from them.

9. Changes to this policy

If this policy changes materially, we'll update the date at the top of this page and, for signed-in users, note it the next time you sign in.

10. Data controller

ConvertHub is operated by [Legal entity name], [registered address] (placeholder — replace with your actual registered business name and address before launch; GDPR and similar laws require the controller to be identified).

11. Contact

Questions about this policy: privacy@example.com (placeholder — replace with a real contact address before launch).

This page is a plain-language draft based on how ConvertHub actually works. It is not legal advice, and hasn't been reviewed by a lawyer — have one check it against your actual data practices and applicable law (e.g. GDPR, CCPA) before relying on it in production.