Aller au contenu principal
TransConvert

Privacy Policy

This policy explains what information TransConvert collects when you use this site, and how it's used. We've tried to write this in plain language and keep it accurate to what this specific site actually does — not a generic template. It applies wherever you're accessing this site from.

1. What data does TransConvert collect?

For every visit, we automatically record: your IP address, your browser and device type, and which pages you view. This is used for basic security (blocking abuse) and traffic statistics.

When you convert a file, we record the file's name, size, and source/target format. We do not record or store the contents of the file itself.

If you create an account, we store your name, email address, and a securely hashed password (we never store your actual password — it's run through a one-way hash before it touches our database, so even we can't read it back). If you upgrade to a paid plan, subscribe to Team, or generate an API key, we store what's needed to run those features — see the sections below.

If you send us a message through the Contact page, we store your name, email address, and message so we can reply.

2. Are my uploaded files stored?

No. Your file is processed only long enough to produce your converted download, then removed immediately. We do not back up, inspect, or share the contents of your files with anyone. This is true whether you're signed in or not, and whether you're on a free or paid plan.

3. Do you use cookies?

Yes, but only functional ones — nothing here is used to track you across other websites or build an advertising profile:

  • If you sign in, a session cookie keeps you logged in. It's deleted when you sign out or your session expires.
  • If you choose a language other than the one your browser suggested, a cookie remembers that choice for a year.
  • To show you the site in the right language and, where applicable, work out whether you need to see a cookie-consent banner, we set a cookie remembering the country your connection appears to come from.
  • If you're shown a cookie-consent banner (this only happens in certain regions, and only once analytics or advertising is actually turned on — not the case today), a cookie remembers your accept/reject choice for a year so you're not asked again on every visit.
  • The Cloudflare Turnstile check on our sign-in and sign-up forms (a "prove you're not a bot" step) may set its own cookie or collect device signals — this is Cloudflare's mechanism, governed by Cloudflare's own privacy policy, not something we control directly.

We don't currently run any advertising or analytics service — though the ability to turn on Google Analytics or Google AdSense already exists as an admin setting, for a future date. If either is switched on, this section, and a cookie consent notice if one becomes legally required at that point, will be updated before it takes effect, not after.

4. Third parties we share data with

We use a small number of outside services to run features of this site. Each only receives the specific data it needs to do its job:

  • Lemon Squeezy — handles payment processing for paid plans. They receive your name, email, and payment details; we never see or store your card number ourselves.
  • Brevo — sends transactional emails (like password resets). They receive your name and email address for that purpose.
  • Google — if you sign in with Google, or connect Google Drive to import/export files, Google shares the identity or file-access information you approve during that connection.
  • Dropbox — if you connect Dropbox to import/export files, Dropbox shares the file-access information you approve during that connection.
  • Cloudflare — provides the bot-protection check on our sign-in forms (see the Cookies section above).

If you're an API customer and provide a webhook_url when submitting an asynchronous (video/audio) conversion job, we also send that job's result — its status, the filename, and a link to download the converted file — to the URL you specify, once, when the job finishes. That's a destination you choose and control yourself, not a third party we selected; nothing is ever sent unless you provide one.

We don't sell your data to anyone, and we don't share it with any other third party for their own marketing purposes.

5. International data transfers

Every provider named above operates outside Turkey — mainly in the European Union and the United States. Using this site, or a feature that involves one of them, means your data may be processed on servers in those countries, not just the one you're browsing from.

Where EU or Turkish data protection law requires a specific safeguard for a transfer like this — a data processing agreement, standard contractual clauses, or an equivalent commitment — we rely on the safeguards those providers make available as part of using their service, and we don't hand data to a provider without at least a contractual commitment covering it. If you'd like more detail about a specific transfer, ask via the Contact page.

6. Team accounts and API keys

If you're part of a Team plan, the team's owner and site administrators can see aggregate usage information for the team (not the contents of any file). If you generate an API key, we store a securely hashed version of it to authenticate your requests — the raw key is shown to you once and encrypted for safekeeping if you ever need to view it again from your account.

7. How long is my data kept?

Account data, activity logs, and conversion metadata are kept until you delete your account or the site operator removes them — there is no automatic expiry for these. A few specific things ARE deleted automatically: files submitted through our async video/audio processing are removed within 48 hours of completion, and password reset links expire after 1 hour or as soon as they're used, whichever comes first. Contact messages are kept until you ask us to delete them, or the site operator removes them.

8. Who can see this data?

Account and activity data is visible only to the site administrator, through a password-protected admin panel, plus the specific third parties named in Section 4 for the specific purpose described there. We do not sell this data, and we don't share it with anyone else except where required by law.

9. Your privacy rights

Depending on where you live, you may have some or all of these rights over the personal data we hold about you: to know what we hold and why, to get a copy of it, to correct it if it's wrong, to have it deleted, to object to or restrict certain processing, and to receive a copy of it in a portable format. These come from laws like the EU's GDPR and Turkey's KVKK (Kişisel Verilerin Korunması Kanunu) — the two lists overlap almost completely regardless of which one applies to you.

In practice: if you have an account, you can delete it yourself at any time from Account → Delete Account — this removes your profile and account data immediately. For anything else — a copy of your data, a correction, or removing a Contact-page message — reach out via the Contact page referencing your account or message, and we'll handle it directly.

If you're not satisfied with how we've handled a request, you can also complain to your local data protection authority — in Turkey, the Personal Data Protection Board (Kişisel Verileri Koruma Kurumu); in the EU, your own country's authority. If you're in the United States, some states give you a similar set of rights under their own privacy laws; we apply the same practices above to those requests too — and since we don't sell your personal information or share it for cross-context advertising, there's currently no "opt out of sale" to exercise. If that ever changes, this section is updated first.

10. Is this service for children?

This service isn't directed at children. Creating an account requires you to be old enough to enter into an agreement where you live (commonly 18, sometimes younger). We don't knowingly collect personal data from anyone under 13. If you believe a child has given us data without appropriate consent, contact us via the Contact page and we'll delete it.

11. Who operates this service?

This service is operated by TransConvert. For any question about this policy or your data, the Contact page is the fastest way to reach us specifically about privacy.

12. Will this policy change?

It might, as the site's features change — this page will be updated to reflect that before those features go live. Check back here for the latest version.