Privacy by architecture
Convertarix is designed so that many free tools run entirely inside your browser. Those local tools do not upload the file to our conversion server.
Local tools
Tools marked Local process input in your browser using JavaScript/WebAssembly. File contents are not sent to the Convertarix server by those tools. Third-party CDN requests may still occur to load browser libraries unless you self-host the dependencies.
Server conversion and OCR
Tools marked Pro upload files to the conversion/OCR service. The supplied application stores uploads in temporary working directories and deletes those files after the request completes or fails. It does not intentionally keep a permanent copy of conversion files.
AI tools
AI tools are clearly marked and use credits. Whenever practical, the supplied architecture OCRs documents on your own OCR worker first and sends extracted text to the configured AI provider. Some vision-dependent tools may send the uploaded image or document to that provider. Your deployed privacy policy must identify the AI/payment providers you actually configure and link to their applicable terms.
Accounts and billing
The application stores account email addresses, password hashes, credit balances, job/credit ledger records, API-key hashes, and payment references needed to operate the service. Raw API keys are shown only when created; only a hash is stored afterward.
Payments
Card/payment credentials are handled by the configured payment provider rather than stored by Convertarix. The included implementation supports PayPal Orders.
Operator responsibility
This starter policy must be reviewed and adapted to your company name, legal entity, hosting location, retention requirements and configured third-party providers before public launch.
Local e-sign and stamping
Browser-based e-sign, initials, stamping, watermarking and numbering tools process the PDF locally. For a large-document entitlement check, the browser may send a SHA-256 fingerprint, the number of selected pages, and an entitlement token to the server. The PDF itself is not sent for that check.