Privacy Policy

We don't store your customer data. CSVs you upload are processed in a serverless function's memory, the converted file is streamed straight back to your browser, and nothing is written to disk or kept in logs. When the function finishes, every byte of your file is gone.

To enforce the free tier and process payments, we store a small amount of data:

• Your IP address (hashed)— used solely to count how many free conversions you've used. Stored in our rate-limit cache (Upstash Redis). Never exported, sold, or correlated with any other data.
• Your purchase records — handled by Stripe. We never see or store your card details. Stripe is PCI-DSS compliant. We retain only your customer ID, the products you bought, and the timestamps.
• Aggregate analytics— if enabled, we use Plausible, a privacy-friendly analytics service that doesn't use cookies or track individuals across sites. We see things like “500 people visited the homepage today” — never anything tied to you personally.

• Read, store, or analyze the contents of your customer CSV.
• Share data with anyone outside our processors (Stripe for payments, Upstash for rate-limit cache, Vercel for hosting).
• Send you marketing email unless you explicitly opt in.
• Use your data to train any kind of model.

We set one cookie: a signed token that records your purchased unlock (e.g. “you bought one conversion”). It expires when you use that conversion or, for subscriptions, 30 days after purchase. No third-party advertising cookies. No tracking pixels.

Under GDPR and similar regimes, you can request access to, correction of, or deletion of any data we hold about you. Email support@example.comand we'll respond within 30 days.

If you'd like your Stripe customer record deleted, we can do that — note Stripe is required by law to retain transaction records for a few years for tax purposes, so the line items themselves can't be deleted immediately.

Questions, concerns, or weirdness? Email support@example.com.