Your privacy, clearly explained

We collect as little information as possible. Here is an exhaustive list of everything we may receive from you:

This is the section most people care about most, so we'll be specific.

Download links generated after processing expire after a limited time. Once expired, the file is gone — it cannot be recovered, by you or by us. If you need the output file, download it before the link expires.

We use the minimal data we collect for the following purposes only:

• To provide the service: Processing your uploaded file and returning the result.
• Abuse prevention: Rate-limiting per IP address to prevent automated misuse of the free plan.
• Aggregate analytics: Counting page views and tool usage to understand which features to improve. Data is anonymised before storage.
• Service communications: If you have a paid account, we may email you about billing, downtime, or major product changes. Marketing emails require explicit opt-in.
• Legal compliance: We will disclose information if required by a valid court order or law enforcement request, and will notify you unless legally prohibited.

We do not sell, rent, or trade your personal information. The third parties we work with are limited to essential infrastructure providers, all bound by Data Processing Agreements and prohibited from using your data beyond the stated service.

We use cookies sparingly. Here is every cookie we set:

We do not use third-party advertising cookies, remarketing pixels, social media tracking pixels, or any form of cross-site tracking. You can disable non-essential cookies in your browser settings at any time.

Depending on where you live, you may have the following rights regarding your personal data:

• Right of access: Request a copy of any personal data we hold about you.
• Right to erasure: Request deletion of your personal data. For free users, there is typically nothing to delete.
• Right to rectification: Request correction of inaccurate data (e.g. your billing address).
• Right to portability: Request your data in a machine-readable format.
• Right to object: Object to processing for direct marketing or other purposes.
• CCPA opt-out: California residents can request information about data sharing and opt out of any sale (we don't sell data, but we honour this right regardless).

To exercise any of these rights, email support@convertpdf.ai with the subject line “Privacy Request”. We will respond within 48 hours and complete all actions within 30 days.

We take reasonable technical and organisational measures to protect your data:

• All data in transit is encrypted using HTTPS / TLS.
• File storage is encrypted at rest.
• Processing environments are isolated per job and torn down after completion.
• Access to production systems is restricted with MFA enforced.
• We conduct regular dependency audits and apply security patches promptly.
• We maintain a responsible disclosure programme — if you find a vulnerability, please report it to support@convertpdf.ai.

ConvertPDF.ai is not directed at children under the age of 13 (or 16 in the EEA / UK). We do not knowingly collect personal information from children. If you believe a child under 13 has provided us with personal data, please contact us at support@convertpdf.ai and we will delete it promptly.

Because the free plan requires no account, no personal data is collected from anonymous users of any age.

We may update this Privacy Policy from time to time. When we make material changes:

• We will update the 'Last updated' date at the top of this page.
• We will post a notice on our homepage for at least 30 days.
• If you have a paid account, we will email you at the address on file.
• Continued use of ConvertPDF.ai after the effective date constitutes acceptance of the updated policy.

For privacy-related questions, requests, or concerns, please contact us: