Privacy Policy

ConvertHub ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our online file conversion platform at converthub.io.

We operate on a privacy-first philosophy: your files are processed transiently and deleted automatically. We never sell your data. We never store your files longer than necessary.

We collect only the minimum data necessary to provide our services:

All files uploaded to ConvertHub are handled with the following safeguards:

• Encrypted in transit: All file uploads and downloads use TLS 1.3 encryption (HTTPS).
• Isolated processing: Each conversion job runs in an isolated container environment with no access to other users' files.
• No human access: No ConvertHub employees can view, access, or read your file contents during or after processing.
• No indexing: Your files are never indexed, analyzed for advertising, or used to train AI models without explicit consent.
• Temporary storage: Files are stored on encrypted cloud servers only for the duration of conversion + a 1-hour deletion window.

We operate a strict automatic deletion policy for all uploaded files:

You can also manually delete your output file at any time using the provided delete link in the download interface.

We implement industry-standard security measures:

• TLS 1.3: All data in transit is encrypted using modern TLS.
• AES-256 at rest: Temporary files are stored with AES-256 encryption.
• Container isolation: Each processing job is containerized and runs in a sandboxed environment.
• Rate limiting: API rate limiting prevents abuse and DDoS attacks.
• Dependency audits: Regular automated security scans of all dependencies.
• Penetration testing: Annual third-party penetration tests on our infrastructure.
• SOC 2 Type II compliant cloud: Our cloud infrastructure providers are SOC 2 compliant.

ConvertHub uses AI models for certain features. Here is a full disclosure:

We use trusted third-party providers to operate our platform:

All third-party providers are bound by data processing agreements (DPAs) compliant with GDPR Article 28.

We use minimal, privacy-respecting cookies:

We do not use advertising cookies, cross-site tracking, or sell cookie data to advertisers. You can clear cookies at any time via your browser settings.

If you are in the European Economic Area (EEA), you have the following rights under GDPR:

• Right of Access: Request a copy of personal data we hold about you.
• Right to Rectification: Correct inaccurate personal data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Portability: Receive your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interest.
• Right to Restrict Processing: Request restriction of processing under certain circumstances.
• Right to Withdraw Consent: Withdraw consent at any time for consent-based processing.

To exercise your rights, contact us at privacy@converthub.io. We will respond within 30 days.

ConvertHub is not directed at children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children.

If you believe we have inadvertently collected data from a child, please contact us at privacy@converthub.io and we will delete it promptly.

For all privacy-related inquiries, please contact our Data Protection team: