Privacy Policy

DocuConversion ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information when you use our website and services at docuconversion.com.

1. Data We Collect

We collect the following categories of information:

• Files you upload — PDF and document files submitted for conversion, editing, or other processing. These are stored temporarily and automatically deleted (see Section 3).
• Account information — If you create an account: your name, email address, and authentication provider details (e.g., Google, GitHub).
• Browser and device data — Browser type, operating system, screen resolution, and IP address. This is collected automatically via standard HTTP headers.
• Usage data — Pages visited, tools used, and conversion types. We do not track individual keystrokes or file contents.

2. How We Process Files

All file processing happens server-side on our secured infrastructure. We do not read, analyze, or access the content of your files for any purpose beyond performing the requested operation (e.g., PDF-to-Word conversion). Files are never shared with third parties except as described in Section 4.

3. File Retention Policy

• Anonymous users (no account) — Uploaded files and processed output files are automatically deleted within 1 hour of processing.
• Authenticated users — Files are retained for up to 30 days to allow you to re-download results from your dashboard. You may manually delete files at any time.

4. Third-Party Services

We use the following third-party services to operate DocuConversion:

• Cloudflare R2 — Object storage for temporary file hosting. Files are encrypted at rest and in transit.
• Google Gemini — Powers AI features (summarization, chat, extraction, OCR). When you use AI tools, the content of your uploaded file is sent to Google's API for processing. Google's data handling policies apply to that processing.
• Authentication providers — Google and GitHub OAuth for account sign-in. We only receive your name and email from these providers.

5. Cookies

DocuConversion uses only essential cookies required for the service to function:

• NextAuth session cookie — Maintains your login session. This cookie is httpOnly, secure, and strictly necessary.

We do not use advertising cookies, analytics trackers, or any third-party tracking scripts.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation:

• Right of access — Request a copy of all personal data we hold about you.
• Right to deletion — Request permanent deletion of your account and all associated data.
• Right to data portability — Export your data in a machine-readable format.
• Right to rectification — Correct inaccurate personal data.
• Right to restrict processing — Limit how we use your data.

To exercise any of these rights, please contact us using the details below.

7. Data Security

We implement industry-standard security measures including TLS encryption for all data in transit, encryption at rest for stored files, and regular security audits of our infrastructure. Access to production systems is restricted to authorized personnel only.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of DocuConversion after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

privacy@docuconversion.com