Skip to content
ConvertFlow

Privacy policy

Last updated: October 2026

Files you upload

  • Files are uploaded over HTTPS directly to private, access-controlled storage. They are never public.
  • Files are used only to perform the conversion you request. We do not view, analyse, sell or share them.
  • Uploaded and converted files are deleted automatically after 60 minutes. Download links expire a few minutes after they are created.
  • By default we remove EXIF metadata (such as GPS location) from converted images unless you choose to keep it.

Information we keep

  • Basic conversion records (tool used, file type, file size, status and time) so we can enforce fair-use limits and fix problems. Records for anonymous visitors are deleted after 30 days.
  • A pseudonymous identifier derived from your IP address for rate limiting. We don't store raw IP addresses with conversion records.
  • Server logs that never include the contents of your files.

Cookies

We use two strictly necessary cookies: one that identifies your browser session so only you can access your conversions, and one that protects against cross-site request forgery. We don't use advertising or analytics cookies. See the cookie policy.

Support payments

Voluntary support payments are processed by Razorpay on their own payment page. We don't receive or store your card, UPI or bank details. Razorpay's privacy policy applies to the information you give them.

Contact

For privacy questions, see our contact page.