Privacy Policy

1. Overview & Scope

At PDF Converters Hub (“we,” “us,” or “our”), we are deeply committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy governs your use of:

• PDF Converters Hub Website — accessible at www.pdfconvertershub.com
• PDF Converters Hub Mobile App — our Flutter-based mobile application available on Google Play Store and Apple App Store
• Any related services, tools, features, or content we offer across these platforms

By accessing our website, downloading and using our mobile app, or using any of our services, you agree to the practices described in this Privacy Policy. If you do not agree with these practices, please do not use our services.

2. Information We Collect

2.1 Files You Upload

When you use our PDF conversion tools on either our website or mobile app, you may upload files for processing. We process these files temporarily solely to provide the conversion service you requested. We do not store your files permanently on our servers. All uploaded files are automatically deleted after processing is complete.

2.2 Information You Provide

• Account Information: Email address and password (if you create an account)
• Support Requests: Name, email, and message content when you contact us
• Feedback: Any information you voluntarily share through surveys or feedback forms

2.3 Automatically Collected Information (Website)

When you visit our website, we may automatically collect:

• Pages visited and time spent on our site
• Conversion tools used and frequency of use
• Browser type, version, and language settings
• Operating system and device type
• IP address (anonymized and truncated)
• Referring website and exit pages
• Approximate geographic location (country/city level)

2.4 Automatically Collected Information (Mobile App)

When you use our Flutter mobile app, we may automatically collect:

• Device model, manufacturer, and operating system version
• App version and build number
• Unique device identifiers (Android ID / IDFV — not advertising identifiers)
• Screen resolution and orientation
• Network type (Wi-Fi, cellular) and carrier information
• App usage events (tools used, conversion success/failure)
• Crash reports and performance logs
• Approximate location (country level, derived from IP)

3. Mobile App Privacy (Flutter)

Our mobile application is built using the Flutter framework and is available for both Android and iOS platforms. The following sections describe privacy practices specific to our mobile app.

3.1 On-Device Processing

Where possible, our mobile app performs PDF processing directly on your device. This means that certain conversions and edits are completed locally without sending your files to our servers. This approach significantly enhances your privacy by keeping your files entirely on your device.

3.2 Cloud-Based Processing

For more complex conversions (e.g., PDF to Word, PDF to Excel), the mobile app may need to send your file to our secure servers for processing. In such cases:

• Files are transmitted over encrypted HTTPS connections
• Files are processed temporarily and deleted within 1 hour
• We never share your files with third parties for marketing purposes
• You will be informed when a conversion requires cloud processing

3.3 Local Storage on Mobile

The mobile app may store the following on your device:

• Converted files: Saved to your device's designated download/documents folder
• App preferences: Theme settings, language selection, and tool preferences
• Cache: Temporary cache files to improve performance (clearable from app settings)
• Recent file history: Names of recently processed files (stored locally, not uploaded)

4. Mobile App Permissions

Our Flutter mobile app requests the following permissions to function properly. We only request permissions that are necessary for the app's core functionality.

Android: On Android 13+ (API 33+), we use granular media permissions (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO) instead of broad storage access. On older versions, we use READ_EXTERNAL_STORAGE with scoped storage enforcement.

iOS: On iOS, we use the PhotoKit and Files framework for limited, user-selected access. We never access your photo library without your explicit permission. Camera access requires your explicit consent each time, or as configured in iOS Settings.

5. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide PDF conversion, compression, merging, splitting, and editing services
• App/Website Improvement: To analyze usage patterns and improve our tools, UI, and performance
• Bug Fixing: To diagnose and fix crashes, errors, and technical issues via crash reports
• Security: To detect, prevent, and respond to fraud, abuse, and security incidents
• Communication: To respond to support requests, send service notifications, and inform about updates
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Analytics: To understand feature popularity and guide product development

We do not use your data for:

• Selling your personal information to third parties
• Sharing your files for advertising or marketing purposes
• Profiling or behavioral advertising based on your file contents

6. Data Security

We implement industry-standard technical and organizational measures to protect your information:

• Encryption in Transit: All data transmitted between your device/browser and our servers uses TLS 1.2+ (HTTPS) encryption
• Encryption at Rest: Any temporarily stored data is encrypted using AES-256
• Temporary Processing: Files are processed in memory where possible and deleted automatically after conversion
• Secure Authentication: User accounts are protected with bcrypt password hashing and JWT-based sessions
• Access Controls: Only authorized personnel with need-to-know access can interact with systems
• Regular Security Audits: We conduct periodic security reviews and vulnerability assessments
• Firewall & DDoS Protection: Our infrastructure is protected by enterprise-grade firewalls and DDoS mitigation
• Secure Mobile Storage: The mobile app uses platform-provided secure storage (Keystore/Keychain) for sensitive data

Despite our efforts, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your information.

7. File Retention & Deletion

• Uploaded files: Automatically deleted within 1 hour after conversion completes
• Converted output files: Available for download for 1 hour, then permanently deleted
• Failed conversions: Partial files from failed processes are deleted immediately
• Mobile app cache: Can be cleared by the user at any time from app settings
• Account data: Deleted within 30 days of account deletion request
• Analytics data: Aggregated and anonymized; raw data retained for up to 14 months
• Crash logs: Retained for 90 days for debugging, then automatically purged

8. Third-Party Services & SDKs

We use trusted third-party services to power certain features of our website and mobile app. Each provider has its own privacy policy governing how they handle data.

We ensure that all third-party services we use meet our high standards for data protection. These providers may process data in accordance with their own privacy policies, which are available on their respective websites. We do not share your files with these providers for any purpose beyond the specific service they provide to us.

9. Analytics & Tracking

9.1 Website Analytics

We use Google Analytics 4 to understand how our website is used. Google Analytics collects information anonymously and reports website trends without identifying individual visitors. Data collected includes page views, session duration, bounce rate, and conversion events. You can opt out by installing the Google Analytics opt-out browser add-on.

9.2 Mobile App Analytics

We use Firebase Analytics to understand app usage patterns. Firebase collects anonymized usage data such as tool usage frequency, session length, and app events. We do not use Firebase for personalized advertising. You can reset your advertising ID in your device settings at any time.

10. Cookies & Web Tracking

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device when you visit a website. We use the following types:

• Essential Cookies: Required for the website to function (authentication, security)
• Analytics Cookies: Help us understand how visitors use our website
• Preference Cookies: Remember your settings (language, theme, etc.)

We do not use advertising or marketing cookies. You can manage or disable cookies through your browser settings. Disabling certain cookies may affect website functionality.

11. Your Privacy Rights (GDPR/CCPA)

Depending on your location, you may have certain rights regarding your personal data:

11.1 GDPR Rights (EU/EEA/UK Residents)

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (“right to be forgotten”)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

11.2 CCPA Rights (California Residents)

• Right to Know: What personal information we collect and how it is used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell your data)
• Right to Non-Discrimination: Equal service regardless of exercising your rights

11.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@pdfconvertershub.com. We will respond to your request within 30 days. For verification purposes, we may ask you to provide proof of identity.

12. Children's Privacy

Our services (both website and mobile app) are not intended for children under 13 years of age (or the minimum age required by applicable law in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information immediately. If you believe a child has provided us with personal information, please contact us.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. We ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection laws, including:

• Standard Contractual Clauses (SCCs) for EU/EEA data transfers
• UK International Data Transfer Agreement (IDTA) for UK data transfers
• Adequacy decisions where applicable
• Binding corporate policies where required

14. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33. Affected users will be notified without undue delay with details of the breach, measures taken, and steps you can take to protect yourself.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:

• Posting the updated policy on this page
• Updating the “Last updated” date at the top
• Sending a push notification through the mobile app (for major changes)
• Sending an email notification to registered users (for major changes)

We encourage you to review this page periodically to stay informed about how we protect your data.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: