Privacy Policy

1. Introduction

Welcome to Convert File Fast. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to your data when you use our document conversion API and website.

By using Convert File Fast, you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

We collect the following types of information:

• Account information: When you create an account, we collect your email address and authentication data necessary to identify you and manage your subscription.
• Usage data: We collect information about your API usage, including the number of conversions performed, file sizes (but not file contents), timestamps, and API key usage patterns.
• Billing information: Payment data processed by Stripe. We do not store full card numbers on our servers.
• Analytics data: Anonymized browsing data collected via PostHog to help us understand how users interact with our website and improve the product.

3. Files You Upload

Your files are never stored on our servers. When you submit a file for conversion via the API, it is loaded into memory, processed, and the resulting PDF is returned directly in the API response. The file and all temporary data are immediately discarded from memory after the conversion is complete.

We maintain zero permanent storage of your documents. No copy of any file you submit is ever written to disk or retained after the API request completes. The privacy and confidentiality of your documents is a core design principle of Convert File Fast.

4. How We Use Your Data

We use the information we collect to:

• Provide, operate, and maintain the Convert File Fast service
• Process payments and manage your subscription plan
• Send transactional emails such as account confirmations and billing receipts
• Monitor service health, prevent abuse, and enforce rate limits
• Analyze usage patterns to improve our product and fix bugs
• Respond to your support requests and communicate with you

5. Analytics (PostHog)

We use PostHog for product analytics. PostHog helps us understand how visitors navigate our website and how users interact with the dashboard, allowing us to make data-driven improvements. PostHog collects anonymized event data such as page views, button clicks, and feature usage.

PostHog does not sell your data to third parties. You can learn more about PostHog's privacy practices at posthog.com/privacy.

6. Third-Party Service Providers

We share data with the following trusted third-party providers who help us deliver and operate the service:

• Supabase — Authentication and database provider. We use Supabase to manage user accounts, API keys, and usage records. Data is stored on Supabase's secure infrastructure.
• Stripe — Payment processing. Stripe handles all billing and payment information. We do not store payment card data on our own servers.
• Resend — Transactional email delivery. We use Resend to send account confirmation emails, billing receipts, and other service notifications.
• Vercel — Hosting and infrastructure. Our web application and API are hosted on Vercel's global edge network.

Each of these providers processes your data only to the extent necessary to deliver their service and in accordance with their own privacy policies.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data. You can delete your account at any time from your dashboard settings.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to the processing of your personal data in certain circumstances.

8. Data Retention

We retain your account data for as long as your account remains active or as needed to provide you with our services. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it (such as billing records, which are kept for 7 years for tax compliance purposes).

9. Security

We take the security of your data seriously. All data is transmitted over HTTPS. API keys are hashed before storage. We implement rate limiting, anomaly detection, and other security measures to protect your account. However, no method of transmission over the internet is 100% secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy, or if you wish to exercise any of your rights, please reach out to us through our contact page. We will respond to your request within 30 days.