security & retention
This page describes exactly what happens to a file from the moment you drop it to the moment it's deleted. No marketing language — just the policy the code implements.
Every file you upload and every file we produce is automatically deleted from our servers within 24 hours by a scheduled cleanup job. Downloads stop working once the file is gone. We keep no long-term archive of your content.
You can convert without an account. To enforce the free daily allowance (25 minutes) we store your IP address alongside a daily usage counter — never the file itself. Create an account and quota tracking moves to your user record instead.
Passwords are stored only as salted hashes (Werkzeug PBKDF2). API access uses short-lived JSON Web Tokens. We never see or store your plaintext password.
Conversions run in isolated background workers on our own infrastructure. Files are written to a private upload directory, processed, and queued for deletion. Files are never used to train models and are never sold or shared.
For accounts: email, password hash, plan, and remaining minutes. For every job: status, duration, file type — not content. For guests: IP + daily minutes used. That is the complete list.
No ads. No tracking pixels. No selling usage data. No indefinite retention. No claiming your files. No 'unlimited' plans that throttle — quotas are published on the pricing page and enforced exactly as written.
responsible disclosure
Found a security issue? Please report it privately to [email protected] and we'll address it before any public disclosure. We commit to acknowledging reports within 72 hours.