Xonvert (“we”, “us”) operates xonvert.com. This policy explains what we collect and how we use it. The short version: your files are processed entirely in your own browser and are never uploaded to us.
Your files stay on your device
Our tools — converting, compressing, editing, viewing — run locally in your browser using on-device processing. The contents of your files are never transmitted to or stored on our servers, and are never used to train models. The only exception is the optional “Pro Quality” feature: if you explicitly choose it for a heavy job, that single file is sent over an encrypted connection to a processing server, used only to produce your result, and discarded immediately afterwards — never stored or logged.
What we collect
- Account information (if you sign up): your email address, a securely hashed password (we never see your plaintext password), and your name if you provide one.
- Usage metering: to enforce free-tier limits, we store per-category daily counts keyed to a privacy-preserving identifier derived from your IP and a browser cookie. This contains no file contents.
- Payment records (if you subscribe): handled by our payment processors (Stripe and NOWPayments). We store your subscription status and invoices, but never your full card number.
- Support messages: anything you send us through the support form.
- Basic technical data: standard server logs (IP, browser type) for security and abuse prevention.
How we use it
- To provide the service and enforce fair-use limits.
- To manage your account and subscription.
- To send service emails you'd expect — verification, password reset, support replies, billing notices.
- To keep the service secure and prevent abuse.
We do not sell your data, and we do not use it for advertising profiles.
Third parties
We rely on a small set of providers strictly to operate the service: payment processing (Stripe, NOWPayments), email delivery (Resend, Brevo), and infrastructure/CDN. They process only the minimum data needed for their function. Some viewer/lookup tools may call a third-party API directly from your browser; those requests don't pass through us.
Data retention & your rights
We keep account, usage, and billing records for as long as your account is active or as required for legal and accounting purposes. You can request access to, correction of, or deletion of your personal data at any time via support. Deleting your account removes your personal information from our systems.
Children
The service is not directed to children under 13, and we do not knowingly collect their data.
Changes
We may update this policy; material changes will be reflected by the “last updated” date above.