Convertere

Last updated: October 9, 2026

Scope of This Privacy Policy

This Privacy Policy explains how Convertere.io ("Convertere," "we," "us," or "our") collects, uses, and shares information when you use our website and file-conversion services (the "Service"), whether you're browsing anonymously, converting a file without an account, or signed in as a registered user or organization member. Convertere.io is the data controller for the personal information described here.

Data Minimisation Commitment

Convertere is built around converting your files, not collecting them. Files you upload for conversion are processed in an isolated environment and are automatically deleted after your conversion completes, and in all cases within 24 hours of upload — whichever comes first. We don't scan, analyze, or use the contents of your files for any purpose other than performing the conversion you requested.

1. Information We Collect and How We Use It

1.1 Information You Provide

Account information: if you create an account, we collect your name, email address, and password (or, if you sign in with Google, the basic profile information Google shares with us).
Uploaded files: the documents, images, audio, video, or archives you upload for conversion — see "Data Minimisation Commitment" above for how long these are kept.
Payment information: if you subscribe to a paid plan, billing details are collected and processed directly by our payment processor, Stripe. Convertere does not store your full card number.
Communications: messages you send us through the Contact page or support@convertere.io, including any information you choose to include.

1.2 Information From Third Parties

If you sign in using Google OAuth (via our authentication provider, Better Auth), we receive the basic profile information (name, email address, profile picture) Google shares as part of that sign-in.

1.3 Information We Collect Automatically

Usage and log data: pages visited, conversion actions taken, timestamps, browser type, and referring URLs.
Device and connection information: IP address (used to infer an approximate, non-precise location for language/region defaults), device type, and operating system.
Website analytics: anonymous, aggregated statistics about how the site is used — see "Analytics" below.
Cookies and similar technologies: see "Cookies and Tracking Technologies" below.

1.4 How We Use This Information

We use the information above to:

Provide, operate, and maintain the Service, including performing the conversions you request
Create and manage your account and organization membership
Process payments and manage subscriptions
Respond to support requests and other communications
Monitor, secure, and improve the Service, including diagnosing technical issues
Detect and prevent fraud, abuse, and violations of our terms
Comply with legal obligations

We do not sell your personal information. We share information only in the following circumstances:

Service providers: with vendors who help us operate the Service under contract:
- Resend — sends transactional email (sign-in codes, password resets, receipts, and account notices).
- Stripe — processes payments and subscriptions.
- Cloudflare — DNS and content delivery (CDN) for the website.
- Google — Google OAuth sign-in if you choose it, and Google AdSense advertising on some converter pages (see "Cookies and Tracking Technologies").
- Hosting providers — we run the Service on infrastructure operated by Cloudfleet, Hetzner, and Google Cloud, located in the European Union.
- Umami — website analytics. This is self-hosted by us at umami.891.studio, so no third party receives your analytics data (see "Analytics").
Legal reasons: if required to comply with a law, regulation, legal process, or valid governmental request, or to protect the rights, property, or safety of Convertere, our users, or the public.
Business transfers: if Convertere is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy's protections.
With your consent: in any other case, only with your explicit consent.

Uploaded files themselves are never shared with third parties for marketing or advertising purposes, and are only ever processed by the conversion infrastructure necessary to fulfill your request.

3. Analytics

We measure how the site is used with Umami, an open-source analytics tool that we host ourselves at umami.891.studio and that is operated by 891 Studio. It is designed to be privacy-friendly:

No cookies. Umami does not set cookies or store identifiers on your device for analytics.
No cross-site tracking. We do not follow you across other websites or build advertising profiles from analytics data.
IP addresses are not stored. Your IP address is used only transiently, to derive a salted hash and your country, and is then discarded.
Data collected: page URL, referrer, browser, operating system, device type, country, screen size, and language.
Aggregated reporting only. We look at totals and trends, not at individual visitors.
Retention: analytics data is kept for up to 24 months and then deleted.
Third parties: because Umami is self-hosted, analytics data is not shared with any analytics vendor.

How to opt out. Choose Decline in the cookie banner, or change your choice at any time with Cookie settings in the site footer. We also honor the Global Privacy Control (GPC) and Do Not Track (DNT) signals sent by your browser: if either is on and you haven't explicitly accepted, analytics stays off.

4. Cookies and Tracking Technologies

We keep cookies and local storage to a minimum:

Strictly necessary cookies — required for core functionality: your sign-in session (managed by our authentication library, Better Auth) and your language preference. These can't be disabled without breaking the Service, and do not require consent.
Local storage for your consent choice — your cookie choice and the date you made it are saved in your browser's local storage (cookie_consent and cookie_consent_at) so we can remember it. We ask again after about 12 months. When you decline analytics, an opt-out flag is also saved there.
Advertising cookies (Google AdSense) — used to show ads on some converter pages. Google may use cookies and similar technologies for advertising as described in Google's policies. This is independent of the cookie banner, which (like GPC and DNT) only controls our Umami analytics. You can manage ad personalization at adssettings.google.com.
No analytics cookies — our analytics (see "Analytics") is cookieless.

You can change your choice at any time with Cookie settings in the site footer, and you can also control or delete cookies through your browser settings.

5. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

Access — request a copy of the personal information we hold about you
Correction — ask us to correct inaccurate or incomplete information
Deletion — ask us to delete your account and associated personal information
Objection or restriction — object to, or ask us to restrict, certain processing
Portability — request your data in a portable, machine-readable format
Withdraw consent — where processing is based on consent (e.g. analytics via the cookie banner), withdraw it at any time

You can exercise most of these rights directly from your account settings, or by emailing support@convertere.io. We'll respond within the timeframe required by applicable law.

Residents of California, Nevada, and other jurisdictions with specific privacy statutes have equivalent rights under those laws; Convertere does not sell personal information as defined by any of them.

Do Not Sell or Share My Personal Information (CCPA/CPRA). We do not sell personal information. Google may use cookies for advertising on pages that show AdSense ads, as described in Google's policies, and you can manage ad personalization at adssettings.google.com. We honor the Global Privacy Control (GPC) signal for our own analytics: with GPC on and no explicit accept from you, we load no analytics. You can change your analytics choice at any time with Cookie settings in the footer.

Users in the European Economic Area, the United Kingdom, and Switzerland have the rights described above under the GDPR and equivalent UK/Swiss law, including the right to lodge a complaint with your local supervisory authority.

6. Data Retention and Security

Uploaded files: deleted after conversion completes, and in all cases within 24 hours of upload.
Account data: retained for as long as your account is active, and deleted within 30 days of account closure, unless we're required to retain it longer for legal, tax, or accounting reasons.
Billing records: retained as required by applicable tax and accounting law.
Logs: retained for a limited period (typically up to 180 days) for security and diagnostic purposes, then deleted or anonymized.
Analytics: aggregated Umami data is kept for up to 24 months, then deleted (see "Analytics").

We use industry-standard safeguards to protect your information, including encryption in transit (TLS) and at rest, isolated per-conversion processing environments, and access controls limiting who can reach production systems. No method of transmission or storage is 100% secure, but we work to protect your information and will notify affected users of any confirmed data breach as required by applicable law.

7. Children's Privacy

The Service is not directed at, and is not intended for use by, children under 13 (or the minimum age required by your local law). We do not knowingly collect personal information from children. If we learn that we've collected personal information from a child without appropriate consent, we will delete it promptly.

8. International Data Transfers

Convertere's infrastructure (hosting, databases, and conversion processing) may be located in different countries than the one you're in. Where we transfer personal information internationally, we rely on appropriate safeguards, such as standard contractual clauses, to protect it consistently with this Policy.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. If we make material changes, we'll notify you by email or through a notice on the Service before the change takes effect. We encourage you to review this page periodically.

10. Contact Us

If you have questions about this Privacy Policy or want to exercise any of the rights described above, contact us at:

Email: support@convertere.io

Privacy Policy