Privacy Policy

ConvertPDF.pro offers different tools with different data-handling models. Read the differences below before using them.

• Private PDF Converter: PDF parsing, cleanup and the AI Safety Scan all run locally in your browser. Your PDF is not sent to our server or an external AI API - document contents are never uploaded or stored on our servers.
• Smart Extraction (web app): the PDF file itself stays in your browser and is never uploaded. To run AI extraction, the text already extracted from it is sent securely to our server for processing by an AI provider. We do not intentionally store that document text afterward, and we do not guarantee how long the AI provider itself retains it.
• Automation API: unlike Smart Extraction in the browser, the API receives your PDF file on our server so it can read the text. The extracted text is then sent securely to an AI provider. For scanned PDFs and photos, the file itself (not just its text) is sent securely to the AI provider so it can be read. We do not intentionally store the PDF or its text afterward, and we do not guarantee how long the AI provider itself retains it. Webhook results are sent only to the https address you provide. API keys are stored only as a hash.
• Export email (web app): when you export results in the web app, we ask for your email address and store it on our server together with the export format, whether you agreed to marketing email, and the time. No document content is stored with it.
• Billing and free-trial records: when you buy a page pack we keep the email address Stripe gives us, your remaining page count, and your access credentials and API key as hashes (the webhook signing secret is kept so you can view it again). To offer a free redo, and to stop redo abuse in the free trial, we keep a fingerprint (SHA-256 hash) of each document's text, not the text itself. Free-trial use is counted against a hash of your IP address and a device identifier, so the trial allowance is shared by people on the same network or device. Hashes are not anonymous: they can sometimes be matched back to the original value. Your browser also keeps your access token and a device identifier in its local storage so you stay signed in to your pages.
• Usage counter: your monthly free-conversion count is stored in your browser's local storage on your device, not on a server or account.
• Analytics: we use Google Analytics (GA4) to record non-sensitive product events (e.g. button clicks, conversion counts, safety-scan status, extraction funnel steps, and purchase events that include the plan, amount and a one-way hash of the order id, never the Stripe checkout session id itself). We do not send PDF text, filenames, extracted field values, schema descriptions, or document content to analytics.
• Payments: page packs are one-time Stripe Checkout purchases. ConvertPDF.pro does not collect or store your card details.
• Contact: questions about this policy can be sent to support@convertpdf.pro.