Privacy Policy

1. Information We Collect

UniConv ("we", "us", or "our", operated by Vovalyx) collects only the minimum amount of personal data required to provide our file conversion and user account services:

• Account Information: When you register or subscribe, we collect your email address, name, password hash, and plan tier.
• Uploaded Files: Files you upload are stored temporarily in an encrypted storage bucket solely to perform your requested conversion. Files are never viewed by human operators.
• Technical & Usage Data: IP address, browser type, device information, and diagnostic logs to prevent abuse and enforce plan limits.
• Billing Information: Payment transactions are handled directly by our payment processor (Stripe). We never store your full credit card number on our servers.

2. Cookies and Tracking Technologies

We use cookies and similar technologies to remember your preferences and deliver our services:

• Strictly Necessary: Essential for session authentication, security, and CSRF protection.
• Analytics Cookies: Help us measure site performance and visitor flow (only enabled with your explicit consent).
• Advertising Cookies: Used by Google AdSense to display personalized or non-personalized advertisements (only loaded after you click "Accept all" or enable them in preferences).

You can modify or withdraw your cookie consent at any time via our Cookie Policy & Settings.

3. Automated File Purging & Retention

Security and data minimization are core to our architecture:

• Uploaded source files and generated output files are assigned randomly generated cryptographic UUIDs.
• An automated server background worker purges all uploaded and converted files once they reach 1 hour of age.
• Download links expire automatically after 1 hour.

4. Third-Party Service Providers

We work with trusted third-party providers who adhere to strict data security standards:

• Supabase: Cloud database, authentication, and encrypted file storage infrastructure.
• Google AdSense: Advertising network governed by Google Consent Mode v2.
• Stripe: Payment processing and subscription management (PCI-DSS Level 1 certified).
• Vercel & Render: Cloud hosting, serverless execution, and API delivery.

5. Your Privacy Rights (GDPR & CCPA)

Depending on your jurisdiction, you have specific rights regarding your personal information:

• The right to access, inspect, or receive a copy of your personal data.
• The right to rectify inaccurate or incomplete records.
• The right to request the complete deletion of your account and associated records ("Right to be Forgotten").
• The right to withdraw consent for analytics or marketing cookies at any time.
• The right not to be discriminated against for exercising your privacy rights.

6. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact our Data Protection Officer: