Privacy Policy

Last updated: July 25, 2026

1. Data Controller

AsanConvert (asanconvert.com) is the data controller for the personal data described in this policy. We are an independently operated online service. For any privacy enquiry, data subject request, or complaint, contact us at [email protected] or through the contact page. We aim to respond to every request within 30 days.

2. Information We Collect

We collect information you provide directly (name and email on registration), files you upload for conversion, and basic usage data (IP address, browser type, pages visited, conversion history). We also collect analytics data through third-party services described below.

3. How We Use Your Information

  • To process file conversions and deliver results.
  • To manage your account and subscription (legal basis: contract performance).
  • To send transactional emails such as conversion-complete notifications and billing receipts (legal basis: contract performance).
  • To improve our service through aggregated analytics (legal basis: legitimate interest).
  • To display personalised and contextual advertising (legal basis: consent where required, legitimate interest elsewhere).
  • To prevent fraud and abuse (legal basis: legitimate interest).

4. File Handling

Uploaded files are stored temporarily on DigitalOcean Spaces (encrypted at rest). Free-plan files are automatically deleted after 3 hours; Pro-plan files after 30 days. We do not read, sell, or share your file contents with third parties.

5. Cookies and Tracking

We use the following categories of cookies:

  • Essential cookies — required for session management, login, and CSRF protection. These cannot be disabled without breaking core site functionality.
  • Analytics cookies — Google Analytics 4 collects anonymised usage data (pages visited, session duration, geographic region) to help us improve the site. Google may set cookies such as _ga and _gid. See Google's Privacy Policy.
  • Advertising cookies — Google AdSense displays advertisements on AsanConvert pages. Google and its partners may use cookies (including the IDE cookie on doubleclick.net) to serve ads based on prior visits to this or other websites. See Google's advertising policies and Ads Settings to opt out of personalised ads.

Where consent is required (for example in the EEA and UK), advertising and analytics cookies are managed through Google's consent tool, which appears on your first visit and lets you accept or reject them. You can change your choice at any time from the privacy settings link Google displays with our ads.

See our Cookie Policy for a full list of cookies and how to control them.

6. Third-Party Services

  • PayPal — payment processing for Pro subscriptions. Your card or PayPal credentials are never stored on our servers.
  • DigitalOcean — cloud infrastructure and file storage (US-based, SOC 2 Type II).
  • Google Analytics — website analytics. Data is processed in the US under Google's standard contractual clauses. Opt out here.
  • Google AdSense — advertising network. May serve interest-based ads using cookies. Manage ad preferences.
  • Cloudflare — DNS, CDN, and DDoS protection. Cloudflare processes traffic metadata (IP addresses, request logs) to deliver and secure the service. See Cloudflare's Privacy Policy.

7. Data Retention

  • Uploaded files — deleted automatically per plan limits (3 hours free / 30 days Pro).
  • Conversion records — kept for 12 months for billing, support, and abuse-prevention purposes, then deleted.
  • Account data — retained while your account is active. You may delete your account at any time; account data is purged within 30 days of deletion.
  • Analytics data — retained per Google Analytics default retention settings (14 months).

8. International Transfers

AsanConvert operates globally. Your data may be transferred to and processed in countries outside your own, including the United States. Where required by law, such transfers rely on standard contractual clauses or other approved mechanisms.

9. Your Rights (GDPR / UK GDPR)

If you are located in the European Economic Area or United Kingdom, you have the following rights under the GDPR:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — request deletion of your personal data ("right to be forgotten").
  • Portability — receive your data in a structured, machine-readable format.
  • Restriction — ask us to limit processing in certain circumstances.
  • Objection — object to processing based on legitimate interests, including profiling for advertising.
  • Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To submit a data subject access request (DSAR) email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

10. Your Rights (CCPA — California Residents)

California residents have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact [email protected].

11. Security

All data is transmitted over TLS 1.3. Files at rest are encrypted. We apply industry-standard security practices and conduct regular security reviews.

12. Children

AsanConvert is not directed at children under 13. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this policy periodically. We will notify registered users of significant changes by email. The "Last updated" date at the top reflects the current version.

14. Contact

Privacy questions or requests? Email [email protected] or use our contact page.