Privacy & file security

Who we are and what we collect

Convertora is operated by MED Q COMPUTER SYSTEMS DESIGN, the data controller for this site. We collect your email address and sign-in details to run your account (contract), successful conversion records for service reporting (legitimate interests), anonymous usage and security logs such as hashed IP information to prevent abuse (legitimate interests), and advertising cookies only where you consent (consent). Account data is kept while your account exists and deleted or anonymised when no longer needed. You can ask to access, correct, delete or export your data, or object to its use, by contacting us.

We share data only with service providers that host and run the site, with our payment processor Stripe only for historical subscription management, payments, tax and invoicing, with professional advisers where needed, and with authorities where the law requires. Access to data is restricted and connections are encrypted.

Where your files are processed

There are two kinds of tool here, and each tool's page says which one it is. Our PDF and image tools — PDF to JPG, JPG to PDF, compress, merge, split and the image converters — run entirely inside your browser. Your file is read into memory on your own device, converted there, and offered straight back as a download, so there is no server copy at all.

PDF to Word, PDF to Excel and PDF to PowerPoint cannot be done reliably in a browser, so those three upload your PDF over HTTPS and convert it on our server. The PDF itself is converted in memory and is never written to storage.

Temporary results and automatic deletion

For the three server tools, only the converted result is stored, in a private area that is not publicly readable. It is kept for up to one hour so you have time to download it, then removed automatically along with its record. The download itself uses a signed link that stops working after a couple of minutes; once it has expired, or the result has been cleaned up, the file can no longer be downloaded and you simply convert again.

For the in-browser tools nothing is uploaded at all, and results are held in the page only — they are gone when you clear them or close the tab.

Private to your session

Each conversion is tied to the browsing session that started it, using a hashed identifier rather than anything that names you. Only that session can ask for the download link to its own result; a request for someone else's conversion is refused, and no result is reachable without a freshly issued signed link.

What we record

A free account is required and we never store the contents of your documents. Nothing from inside a file — no text, no tables, no images — is logged, measured or kept. What we record is limited to product measures: which tool was used, the file size, the page count, how long the conversion took, and whether it succeeded or failed.

One clarification about names: so your download arrives with a sensible name, the result keeps your file's own name with the new extension, and that download name is held in the temporary job record. It is deleted with the result within the hour, and it is never used as a storage location — stored files are named only from the job's own identifier.

Advertising measurement (Google Ads)

Convertora loads the Google tag from Google (Google Ads) to measure which ads bring visitors to the site. Google may receive standard browser data such as your IP address, browser details, the pages you visit here and an ad-click identifier, and may set cookies. We report successful tool conversions and newly registered email accounts only after email verification, for advertising measurement and ad optimization. Sign-up events contain no email address, password or account identifier. Nothing from your files is ever shared. In the EEA, UK and Switzerland this only happens after you accept in the cookie banner; your choice and its date are stored in your browser with the notice version and choice history, and you can change or withdraw it at any time using Cookie settings. Rejection stops new advertising events; previously blocked registrations are not reported later.

Limits and safety

Server conversions accept PDFs up to 25 MB and 200 pages per document, and stop if a conversion would take longer than 25 seconds. Files are checked before processing begins, oversized or unsupported files are rejected with a clear message, and a converter that cannot handle your file tells you so rather than producing a broken result. Scanned, image-only PDFs have no text to read and are not supported yet.