Privacy Policy

Last updated: 30 September 2026.

Principles

• Hosted in the EU (France) — the entire infrastructure runs at OVHcloud, in France. No provider outside Europe is involved in processing your files.
• Automatic deletion — your files, uploaded and converted, are deleted one hour after the conversion, except in the cases described below.
• No tracking — no tracking cookies, no third-party analytics.

Data and retention

• Files — deleted 1 hour after the conversion. If it fails, the uploaded file is kept 72 hours to find the cause; only the publisher has access to it.
• Account — email, plan, Stripe customer ID, API keys (stored hashed), kept as long as the account exists.
• Technical logs — IP address (14 days), conversion metadata: tool, file name and size, status (30 days), address refused at sign-up as disposable or non-existent (7 days).
• Public sharing — the file stays online until the expiry you choose (at most 7 days on Free, 30 on Premium) or until you revoke it. As a hosting provider under French law (LCEN), conv2pdf keeps the technical data of the share's creation (IP address, port, browser, date, account) for 1 year, disclosed only to authorised authorities upon legal request.
• Premium OCR — the Word document is delivered through a link sent to the account's email address, valid 24 hours.

Legal basis

• Performance of the service or contract (GDPR Art. 6.1.b): conversions, account, subscription.
• Legal obligation (GDPR Art. 6.1.c): billing, public sharing log.
• Legitimate interest (GDPR Art. 6.1.f): technical logs and failed conversions, for the security and reliability of the service.

Sub-processors

• OVH SAS (France) — hosting.
• Brevo (France) — sending emails (sign-in, OCR delivery, alerts, contact form).
• MailProbe (same publisher as conv2pdf) — checking the address at sign-up.
• Stripe Payments Europe Ltd (Ireland) — subscription payments. Stripe never receives your files.

Cookies

A single cookie: conv2pdf_sid, the session cookie required to sign in (30 days). No tracking or analytics cookies.

Your rights

You can access, rectify, erase or retrieve your data, object to its processing or ask for it to be restricted. Write to contact@conv2pdf.com or use the contact form, mentioning that this is a GDPR request. You may also lodge a complaint with the French data protection authority (CNIL — www.cnil.fr).

DPA (data processing agreement)

If you use conv2pdf in a professional context to process third parties' personal data, a Data Processing Agreement (DPA, GDPR Article 28) is provided on request, in English or French, as is a custom data processing agreement (on quote). Write to contact@conv2pdf.com or use the contact form.