Privacy Policy

1. Your files never leave your device

Convert is built so that the files you convert are never uploaded to any server. Every conversion — image, audio, or PDF — runs entirely in your browser, using JavaScript and WebAssembly. We never see, receive, store, or have the technical ability to access the content of the files you process on this site. Closing the tab or clearing your browser removes them completely; there is nothing on our side to delete, because nothing was ever sent to us.

2. What we do collect

Since files stay local, the data we handle is limited to what's needed to run the site and process payments:

• Payment information: if you unlock a download or a pass, payment is handled entirely by Stripe. We never see or store your card number. We keep a record of the purchase itself (amount, currency, which tier, and the country Stripe detected for the transaction) to prove the purchase happened and to handle refunds or disputes.
• Email address, only on the free path: if you choose the free option instead of paying, we ask for your email address (to send you the option to get help if something goes wrong) and record a consent choice — see section 4 below for exactly how that works.
• Approximate location (country-level): we use your IP address, via our hosting provider, to determine which country you're visiting from. This is used only to apply the right rules for the consent checkbox in section 4, and to know which currency to show at checkout. We do not store your IP address itself, only the resulting country.
• Functional cookies: a cookie that proves you've unlocked a tool (so you're not asked to pay twice), and a cookie that records your region for the reasons above. Neither is used for advertising or tracking you across other sites.

3. Who we share data with

We use a small number of providers ("subprocessors") to run the site. None of them ever receive the content of your files — only the account/payment data described above, and only where relevant to their function:

• Stripe (payment processing) — handles your card details directly; we never see them. Stripe has its own privacy policy governing what it does with payment data.
• Neon (database hosting, Singapore) — stores the purchase and consent records described above.
• Vercel (hosting) — serves this website and runs the small server-side functions that handle payments and consent; also provides the country-level location detection in section 2.
• Some tools on this site — background removal, text-to-speech, and video processing — download an open-source AI model or library directly to your browser the first time you use them, from the library's own public CDN (including providers such as Hugging Face and unpkg). This download happens between your browser and that provider directly; we don't proxy it and it never includes your files.

4. The free option and consent to share your email

If you choose to unlock a download for free instead of paying, we ask for your email and, separately, your consent to share that email with advertising partners. This second checkbox is never pre-checked and is always optional if you're visiting from the EU, UK, or EEA. If you're visiting from outside those regions, checking that box is a condition of using the free option — we re-check your region on our own server at the moment you submit the form, not from anything your browser tells us, so this can't be bypassed. We also record which exact version of this consent text you agreed to, and when, as proof of that consent.

5. How long we keep this data

We keep purchase records for as long as needed for accounting, fraud prevention, and legal obligations. We keep consent records for as long as needed to prove that consent was given, which is itself a legal requirement. We don't keep either longer than necessary for those purposes.

6. Your rights

Depending on where you live, you may have the right to access, correct, or delete the data we hold about you, or to withdraw consent you previously gave (for example, the resale consent in section 4). Because we don't collect an account or a name, we can only act on requests we can verify are tied to your own email or purchase — contact us using the details below and we'll do our best to match your request to what we hold.

7. Security

This site is served over HTTPS. Payment details never touch our servers — Stripe handles them under its own security and compliance program. Access to the database described in section 3 is restricted to the systems that need it to run the site.

8. Changes to this policy

If what we collect or who we share it with changes, we'll update this page and the date at the top. We don't expect to need a separate notification system for a site this size, but the page itself will always reflect current practice.

9. Contact

Questions about this policy, or a request under section 6, can be sent to privacy@abakira.com.