Privacy policy.

Effective September 5, 2026 · Operated by TECHZILLA

What we process

ConvertFlow processes uploaded files and generated outputs to perform the conversion you request. For an account, we store your email address, name, password hash, email verification status, and plan information. We also retain conversion metadata such as tool, status, dates, file names, and expiry, and usage totals needed to enforce allowances.

Why we process it

We use this information to deliver conversions and account services, prevent abuse, manage billing, and meet legal obligations. Where applicable, the legal bases are performance of our service agreement, legitimate interests in operating and securing the service, and legal obligations for payment records.

Retention and deletion

Conversion files expire after 1 hour for free usage and 24 hours for paid usage. A periodic cleanup removes expired files. Conversion history can remain after a file expires; use “Clear history & files” in your workspace to delete your conversion records and stored files. Account and billing records are separate and may need to be kept to provide the service or comply with legal requirements.

Cookies and analytics

Essential cookies identify your authenticated session or guest conversion session. They enable private downloads and enforce usage limits. Native aggregate product events include event names and tool identifiers, not filenames or document content. External Google analytics is not enabled at launch.

Service providers

Hosting infrastructure processes files and account information to run the service. When Stripe billing is enabled, Stripe processes payment details; ConvertFlow stores billing identifiers and subscription state, not full payment card numbers. If Google sign-in is available and you choose it, we receive the profile details needed to create or access your account. Email delivery providers process transactional emails when email delivery is configured.

Your choices and rights

You can access conversion history and remove your stored conversions in your workspace. Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to processing of personal data, and to data portability or a complaint with a data protection authority.

A dedicated privacy contact address has not yet been published. This contact information is a remaining launch requirement; it is not replaced by an automated support form.

Changes

We will update this page when our practices change. The effective date above identifies this version.