Privacy Policy

Last updated: 6 September 2026.

Principles

conv2pdf is built around three strict commitments:

• France hosting — the entire infrastructure runs at OVH France (Gravelines). No extra-European third party (notably the United States) is involved in the processing chain.
• No result caching — generated files are never kept beyond what is strictly necessary for your download (maximum 1 hour), apart from the two exceptions below.
• Automatic deletion — an internal cron deletes all input and output files within 1 hour of the end of the conversion at the latest, on a purge cycle running every five minutes. Two exceptions, both triggered by you: a share link you generate yourself, whose file stays available until the expiry you chose or until you revoke it (see “Public file sharing”); and the Word document produced by a Premium OCR, delivered through a link valid for 24 hours (see “Premium OCR delivery”).

Data collected

One-off conversions (Free, no account)

• Uploaded file (deleted after 1 h)
• Converted file (deleted after 1 h)
• IP address (server logs, kept 14 days for security)
• Job metadata: tool used, original filename, size, duration, status (kept 30 days for statistics)

User account (Premium and API)

• Email
• Subscription plan
• Stripe customer ID (for Premium billing)
• Active sessions (signed cookie, 30 days)
• API keys (SHA-256 hashed, never stored in clear)
• Aggregated conversion statistics (over the last 30 days)

Public file sharing

Retention of the shared file — unlike a plain conversion (deleted within 1 hour), a file made available through a share link is kept until the expiry you set: at most 7 days on Free and 30 days on Premium. You can delete it at any time by revoking the link; removal is immediate.

When you generate a public share link via the sharing feature, conv2pdf acts as a hosting provider under French law (LCEN — loi pour la confiance dans l'économie numérique). Pursuant to decree no. 2021-1362 (whose retention is enjoined for one year by decree no. 2021-1363), the following technical data is retained for 1 year from share creation:

• Source IP address of the contributor
• Source TCP port (necessary in NAT/CGNAT mobile contexts)
• Browser user-agent
• Creation timestamp

This data is stored in a dedicated audit log, separate from the content itself. It is only disclosed to judicial authorities upon formal legal request. It is never used for commercial, statistical or marketing purposes. If you do not wish this log to be generated, do not use the public sharing feature — plain conversion (without sharing) is not affected.

Premium OCR delivery

Text recognition on a scanned PDF (OCR, Premium only) runs in the background: it can take several minutes, longer than a web page will wait. The Word document produced is therefore delivered through a link you receive by email, valid for 24 hours, after which the file is deleted. That link is only created if you request the OCR, it is only sent to your account's email address, and it appears under “My shares” in your account area, where you can revoke it at any time — removal is immediate.

This delivery is not a public disclosure: it therefore does not generate the audit log described above, and no IP address is kept for a year on that basis. If you forward the link to a third party, that transmission is yours; use the sharing feature if you want to publish a file.

Legal basis

• One-off conversion: performance of the requested service (GDPR Art. 6.1.b)
• Account and subscription: contract performance (GDPR Art. 6.1.b)
• Stripe billing: legal accounting obligation (GDPR Art. 6.1.c)
• Public sharing audit log: legal obligation (GDPR Art. 6.1.c, French LCEN Art. 6 II and decrees no. 2021-1362 and no. 2021-1363)
• Security logs: legitimate interest, abuse prevention (GDPR Art. 6.1.f)

Sub-processors

• OVH SAS (France) — hosting
• Brevo (France) — transactional emails (sign-in magic links, email-change confirmation, forwarding of contact form messages)
• Stripe Payments Europe Ltd (Ireland) — payment for paid Premium and API plans only. Stripe never receives the content of your converted files.

Cookies

conv2pdf uses no tracking or third-party analytics cookies. The only cookie set is conv2pdf_sid, a technical session cookie (HMAC-signed, HttpOnly, SameSite Lax) required for your sign-in. Its lifetime is 30 days.

Your rights

Under the GDPR, you have the following rights:

• Right of access to your data
• Right to rectification
• Right to erasure (instant account deletion on request)
• Right to portability
• Right to object
• Right to restriction of processing

To exercise these rights, contact contact@conv2pdf.com or use our contact form, mentioning that this is a GDPR request. You may also lodge a complaint with the French data protection authority (CNIL — www.cnil.fr).

Enterprise DPA

A standard Data Processing Agreement (DPA) is available for direct download, applicable to all paid API customers:

• conv2pdf DPA v1.2 (PDF, English) — translation for convenience
• conv2pdf DPA v1.2 (PDF, français) — legally binding version

To sign: complete your information in the "The Controller" section, sign the final block, and email the scanned signed copy to contact@conv2pdf.com. The countersigned DPA will be returned to you shortly.

For any question, amendment or custom data processing agreement (Custom on quote), use our contact form.