Privacy Policy · Xonvert

Xonvert (“we”, “us”) operates xonvert.com. This Privacy Policy explains what we collect, why, how we use and protect it, and the rights you have. The short version: your files are processed in your own browser and never uploaded to us.

1. Who we are

Xonvert is the data controller for personal data described here. For questions about your data or to exercise your rights, see support.

2. Your files stay on your device

Every tool — converting, compressing, editing, viewing, recording, transcribing, translating — runs locally inside your browser using on-device processing. The contents of your files are never transmitted to or stored by Xonvert, never logged, and never used to train any model.

Some tools download model weights (for OCR, transcription, image enhancement, etc.) the first time you use them — these are static downloads from a content-delivery network. Your input does not travel with that download.

3. What we collect

Account data (only if you sign up): your email address, a securely hashed password (we never see your plaintext password), display name if you provide one, and account preferences.
Usage metering: per-category daily counts keyed to a privacy-preserving fingerprint derived from a cookie identifier and your IP address. Lets us enforce free-tier limits without an account, and survive cookie clearing or IP changes. No file contents are involved.
Session telemetry: for live tools (group calls, watch parties, file transfers) we briefly store the room identifier and minimal signalling metadata while the session is active. Media is peer-to-peer — it does not pass through Xonvert.
Payment records (if you subscribe): your subscription tier, billing cycle, last four digits of the card or crypto receipt id, invoices, and renewal status. Full card numbers are never stored by us — they live with the payment processor.
Support correspondence: messages you send through the support form and our replies.
Basic technical data: standard request logs (IP, browser type, timestamp, requested path) retained briefly for security and abuse prevention.

4. How we use your data

To provide and operate the Service and enforce fair-use limits.
To create, manage, and protect your account.
To process subscription payments and refunds.
To send transactional emails: email verification, password reset, payment receipts, security alerts, replies to your support questions.
To detect and prevent fraud, abuse, brute-force attempts, and other security threats.
To comply with legal obligations.

We do not sell or rent your personal data. We do not use it to build advertising profiles. We do not share it with data brokers.

5. Legal bases (GDPR, where applicable)

Contract — to deliver the Service you signed up for.
Legitimate interest — to keep the Service secure, prevent abuse, and improve reliability.
Consent — for any optional feature that explicitly asks (always revocable).
Legal obligation — for invoicing/tax records.

6. Who we share data with

We rely on a small set of trusted providers strictly to operate the Service. Each receives only the minimum data needed for its function and is bound by data-processing terms. The full list — including which country processes the data — is published at subprocessors. Examples: payment processing (Stripe, NOWPayments), transactional email delivery, and DNS/CDN.

7. International transfers

Where personal data is transferred outside of your region (for example, when a credit card is processed by a US-based payment processor), we rely on the legal mechanisms our processors offer — typically the Standard Contractual Clauses — and pass on only what the processor needs.

8. How long we keep data

Account data: while the account is active, plus a short period to handle disputes.
Usage counts: daily counts roll off after we no longer need them for fair-use enforcement (typically within 90 days).
Billing records: as required by accounting law (commonly 7–10 years).
Request logs: 30 days, then deleted or anonymised.
Support messages: as long as needed to resolve your request, plus a short audit window.

Deleting your account removes the personal data we no longer have a legal obligation to keep.

9. Your rights

You can, at any time:

Access the personal data we hold about you.
Correct data that's inaccurate or incomplete.
Delete your account and the personal data we don't need to keep for legal reasons.
Export your data in a portable format.
Object to processing based on legitimate interest, and restrict processing where applicable.
Withdraw consent for anything we're processing on that basis.
Lodge a complaint with your local data-protection authority.

California residents (CCPA/CPRA) have the same rights under that framework, plus the right to opt out of any “sale” or “sharing” of personal information — neither of which we do.

Make a request through support. We respond within 30 days.

10. How we protect your data

We use industry-standard technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. Passwords are stored hashed (never in plaintext), connections to the Service are encrypted in transit, and access to systems holding personal data is restricted on a need-to-know basis.

For an overview written for non-specialists, see the Security page.

11. Data breach

If a breach of personal data ever occurs and it's likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours of becoming aware, and notify affected users directly without undue delay.

12. Children

The Service is not directed to children under 13 (or under 16 where required), and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we'll delete it.

13. Cookies

See our Cookie Policy for the small functional set we use. The website shows no advertising and sets no cross-site tracking cookies.

14. Mobile app (Android and iOS)

The Xonvert app runs the same tools as the website, on your phone. Everything above applies, plus:

Files you pick in the app or share into it from another app are processed on your phone and never uploaded. Results are saved or shared only where you choose. The app keeps a list of your recent tools and results on the phone only.
Rewarded ads. When a free daily limit is reached, you may choose to watch a short ad to unlock more uses. Ads are provided by Google AdMob and are non-personalised: we do not ask for tracking permission and do not use your activity to target ads. To show and measure an ad, Google AdMob may process your device's advertising identifier, IP address, and basic device and app information, as described in how Google uses information from apps that use its services. Ads are only shown when you tap to watch one; Pro subscribers see no ads.
Unlocking the extra uses. When you watch an ad, the app passes Google a short-lived, signed ticket; Google's servers then confirm the completed ad to us so we can add the uses to your daily allowance. The ticket contains only the usage-metering fingerprint described in section 3 — no file contents and nothing about the ad.
Sign-in is optional. With Google sign-in on Android, Google shares your name and email address with us to create or open your account.
Camera and microphone are used only by the tools that need them (video call, voice recorder, QR scanner), only after you allow it, and the stream stays on your device or goes directly to the person you are calling.

15. Changes to this policy

We may update this Policy as the Service evolves. Material changes will be highlighted, and the “Last updated” date above will change. Continued use after a change means you accept the new version.