Privacy policy.
Effective September 8, 2026 · Operated by TECHZILLA
What we process
ConvertFlow processes uploaded files and generated outputs to perform the conversion you request. For an account, we store your email address, name, password hash, email verification status, and plan information. We also retain conversion metadata such as tool, status, dates, file names, and expiry, and usage totals needed to enforce allowances.
Why we process it
We use this information to deliver conversions and account services, prevent abuse, manage billing, and meet legal obligations. Where applicable, the legal bases are performance of our service agreement, legitimate interests in operating and securing the service, and legal obligations for payment records.
Retention and deletion
Conversion files expire after 1 hour for free usage and 24 hours for paid usage. A periodic cleanup removes expired files. Conversion history can remain after a file expires; use “Clear history & files” in your workspace to delete your conversion records and stored files. Account and billing records are separate and may need to be kept to provide the service or comply with legal requirements.
Cookies and analytics
Essential cookies identify your authenticated session or guest conversion session. They enable private downloads and enforce usage limits. Native aggregate product events include event names and tool identifiers, not filenames or document content. Google Analytics and Whop are optional and load only after your consent. Your marketing preference is saved in local storage, with an essential preference cookie as a fallback.
Optional Google Analytics
With your consent, Google Analytics measures visits to public pages, campaign attribution, uploads accepted for processing, conversion outcomes, download clicks, checkout starts, and completed registrations. It receives public page URLs with permitted campaign parameters, static page titles, referrer information, cookies and browser/device information. We do not send filenames, document content, email addresses, account IDs, or private download links. Automatic form and download collection, advertising signals, and ad personalization are disabled. Public page views exclude account, authentication, administration, and download routes. Registration is reported only from a verified new-account receipt, using a generic registration context.
Google Analytics cookies expire after 60 days without automatic renewal. Google may process data outside your country under its privacy policy. Analytics reports cover consenting visitors and may be incomplete because of browser blocking. Payment completion is recorded in our internal billing system; a checkout-start event does not mean a purchase occurred.
Optional Whop marketing measurement
Only if you accept marketing measurement, we load the Whop Pixel for account biz_vuOBp8ztGtgNia. It measures visits to public pages, views of tool and pricing pages, and completed account registrations to attribute advertising activity. Registration measurement requires consent before the account is created and again when the event is sent. Whop receives page URLs, permitted campaign parameters, page titles, referrer information, IP and browser/device information, cookies or browser identifiers, and a browser fingerprint. Its identifier cookie may persist for up to two years.
We disable automatic form collection, URL identity collection, automatic navigation tracking, link decoration, and iframe identity sharing. We do not send uploaded files, document content, filenames, names, email addresses, or account details to the pixel. Account, authentication, administration, and download routes are excluded from page tracking. A completed-registration event is the sole exception on the clean signup or dashboard page after a new account is created. It contains an opaque event identifier for deduplication, not a name, email address or account ID. A signed, HttpOnly marker cookie expires after ten minutes and is consumed once; an opaque session-storage entry prevents duplicate browser events. Pages containing unrecognized or sensitive URL parameters are excluded from marketing events.
Whop may process this information outside your country, including in the United States, under its privacy policy. We rely on your consent for this optional measurement. Declining does not affect conversions or downloads. You can withdraw consent at any time using Analytics & marketing preferences in the footer. Withdrawal reloads the page to stop the analytics scripts and applies to future measurement; information already received by these providers is subject to its retention practices.
Service providers
Hosting infrastructure processes files and account information to run the service. When Stripe billing is enabled, Stripe processes payment details; ConvertFlow stores billing identifiers and subscription state, not full payment card numbers. If Google sign-in is available and you choose it, we receive the profile details needed to create or access your account. Email delivery providers process transactional emails when email delivery is configured.
Your choices and rights
You can access conversion history and remove your stored conversions in your workspace. Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to processing of personal data, and to data portability or a complaint with a data protection authority.
A dedicated privacy contact address has not yet been published. This contact information is a remaining launch requirement; it is not replaced by an automated support form.
Changes
We will update this page when our practices change. The effective date above identifies this version.
More about file security →