Privacy Policy

1. Who is responsible

The operator of this PDF Word Converter installation is the data controller for personal data collected through the website (mainly Job metadata and technical logs).

When you upload a PDF that contains personal data about other people, you are the controller of that Content. We process it only as a processor / service provider to run the tool you requested, then delete the working copies as described below. You must have a lawful basis before uploading other people’s data.

2. Scope

This policy covers the public website and PDF tools. It does not cover websites we do not operate. You can print this page from your browser for your records.

3. Categories of data we collect

• Job data — Job identifier, tool name, status, file size, page count, timestamps, download name, and the IP address used to apply rate limits
• Technical data — browser request metadata necessary to serve pages and APIs
• Session data — a short-lived session cookie so uploads can be associated with your browser for that visit
• Content — the PDF (and generated output) for the life of the Job only

We do not require an account. We do not collect payment card data. We do not run third-party advertising or analytics pixels on these pages.

4. Files you upload

Uploads and outputs are stored outside the public web root. We access file contents only as needed to merge, split, compress, convert, OCR, lock, or unlock them.

We do not index your documents for advertising. We do not use your Content to train, improve, or develop our own or third-party AI models.

Passwords entered for Protect or Unlock are used only for that Job and are then stripped from the Job record. They are not kept as a password vault.

5. Purposes and lawful bases

We process personal data for the following purposes. Where GDPR or similar law applies, the lawful basis is noted.

• Provide the tool you asked for — necessary to perform the service you request (contract / requested service).
• Rate limits and abuse prevention — legitimate interest in keeping the Service stable and secure.
• Legal requests — compliance with a legal obligation where we cannot reasonably refuse.

We do not send marketing emails. We do not sell personal data.

6. How long we keep data

• Working files and outputs — deleted about two hours after a Job finishes (or sooner if this installation is configured that way). After deletion we cannot restore them.
• Job metadata — may remain for a short period for security and debugging, then is removed or anonymised.
• Rate-limit logs — short-lived, used only to enforce hourly limits.

7. Sharing and international transfers

We do not sell your files or a list of visitors. We share data only:

• With infrastructure that already runs this installation (database and worker) under the operator’s control
• When the law requires it, or to establish, exercise, or defend a legal claim

This installation is intended to process data locally on the operator’s machine. We do not operate a global CDN for your PDFs. If the operator later uses a hosting provider in another country, that provider would be a processor bound to the operator’s instructions.

8. Cookies

We use a strictly necessary session cookie so your upload can be turned into a Job in the same browser session. We do not use advertising or optional analytics cookies. Details are in the Cookie Policy.

9. Security

We apply reasonable technical measures for a local tool: storage outside the web root, hashed handling of tool passwords after use, and rate limits. No method of transmission or storage is perfectly secure. Do not upload files you cannot accept exposing if this machine is compromised. More detail: Security.

10. Your rights

Depending on where you live, you may have the right to:

• Access a copy of personal data we hold about you
• Rectify inaccurate data
• Erase data (the “right to be forgotten”), subject to legal exceptions
• Restrict or object to certain processing
• Data portability, where applicable
• Lodge a complaint with a supervisory authority (for example a data protection commissioner in your country)

To exercise these rights for this installation, use Contact. We cannot restore PDFs that have already expired and been deleted. We may need enough information to find the relevant Job (for example approximate time and tool used), because we do not operate user accounts.

11. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children for marketing. If you believe a child has used the tools inappropriately, contact the operator so any remaining Job metadata can be removed.

12. Automated decision-making

We do not use your Content for profiling or for automated decisions that produce legal or similarly significant effects. Rate limiting is an automated technical control, not a credit or eligibility decision.

13. Changes

If we change how we handle personal data in a material way, we will update this policy and the date at the top. Continued use after an update means you accept the revised policy, except where the law requires a different mechanism.

14. Contact

Privacy questions and rights requests: Contact. How you may use the tools: Terms of Service.