Privacy Policy

1. File Processing

PubConvert processes all files entirely within your web browser using client-side JavaScript. Your files are never uploaded to our servers. We have no access to the contents of any file you convert.

2. Data We Collect

When you create an account, we collect:

• Email address (for authentication and account recovery)
• Payment information (processed securely by Stripe; we do not store card details)
• Conversion metadata (file name, page count, timestamp) for your dashboard history

We do not collect:

• File contents (your .pub files and converted output stay in your browser)
• Document text, images, or layout data
• Any data from files you choose not to convert

3. Local Storage

Converted files are cached in your browser's local storage so you can re-download them without using additional credits. This data is stored only on your device and is removed when you clear your browser data. We cannot access your browser's local storage.

4. Authentication

User authentication is handled by Better Auth, backed by our Neon (PostgreSQL) database. When you sign in with email or a social provider, your credentials are managed by this secure infrastructure. We store only your user ID and email address.

5. Payments

Payment processing is handled by Stripe. Your payment information (credit card numbers, billing address) is sent directly to Stripe and never touches our servers. We receive only confirmation of successful payments and your Stripe customer ID.

6. Cookies

We use essential cookies for authentication (session tokens). We do not use advertising cookies or third-party tracking cookies.

7. Third-Party Services

• Neon: Database hosting (authentication and user data storage)
• Stripe: Payment processing
• Vercel: Website hosting (static pages only; no file data passes through)

8. Data Retention

Account data is retained while your account is active. You may request deletion of your account and associated data at any time by contacting us.

9. Your Rights (GDPR / EEA Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing of your personal data.

To exercise any of these rights, contact us at privacy@pubconvert.com. We will respond within 30 days.

Legal basis for processing: We process your personal data based on: (a) your consent when creating an account, (b) contractual necessity to provide our conversion service, and (c) legitimate interest for improving our service. Note that file conversion is performed entirely in your browser — no personal document data is processed on our servers.

10. International Data Transfers

Our service infrastructure (Neon, Stripe, Vercel) may process account data in the United States. These providers maintain appropriate safeguards including Standard Contractual Clauses (SCCs) for EU data transfers. Your file contents are never transferred — they remain in your browser at all times.

11. Contact

For privacy-related questions, GDPR requests, or data deletion requests, please contact us at privacy@pubconvert.com.