At a Glance: Our Core Data Commitments
- No User Accounts: You do not need to register, create a profile, or submit personal credentials to convert files.
- Automated Ephemeral File Purge: Uploaded originals are unlinked immediately after conversion. Converted outputs are held temporarily for download for 60 minutes and purged in 10-minute automated sweeps. You can also delete files immediately using the download card.
- No Selling of Data: We never sell, rent, monetize, or broker your documents, extracted contents, or metadata.
- Google AdSense Notice: Advertising is planned for a possible future launch, but no ads or advertising trackers are active today.
- Google Gemini AI Disclosure: Only specific AI features (Summarizer, Translate, Tables) send extracted text or page images to Google Gemini API. Standard converters do not use AI.
1. Who Operates the Website
Fileora (accessible at https://pdfconverterfree.in) is an individually owned and operated document conversion and file utility service.
For inquiries regarding this Privacy Policy, your personal data, technical operations, or data deletion requests, you may contact the operator directly at:
Note: The website is operated by an individual. No registered corporate body, fictitious corporate entity, or secondary business address has been created.
2. Categories of Information Processed
We strictly limit information processing to what is technically necessary to perform your requested document conversions, enforce security safeguards, and deliver downloads:
A. Uploaded Files and Generated Outputs
When you select a document, presentation, spreadsheet, image, or archive (e.g., PDF, DOCX, PPTX, XLSX, JPG, PNG, ZIP), the file bytes are transmitted to execute the requested transformation (e.g., Word to PDF, PDF to Word).
B. Document Metadata & User Conversion Parameters
We process original filenames, sanitized output names, file sizes, MIME types, and tool parameters you explicitly provide (such as passwords for protected PDFs, custom watermark text, image quality presets, or target translation languages).
C. Job Identifiers and Download Security Tokens
Each conversion job generates a random 128-bit Job ID (e.g. cjob_...) and a cryptographically randomized 256-bit token. The token must be presented to download the converted file, preventing unauthorized third parties from guessing or accessing your file.
D. Security & Infrastructure Telemetry (IP Addresses)
Client IP addresses are evaluated in server volatile memory to enforce strict abuse-prevention policies: a rate limit of 120 requests/minute and a concurrency limit of maximum 2 simultaneous conversions per user/IP. IP addresses are not compiled into user tracking profiles.
E. Voluntary Communications
If you send an email to [email protected] or submit a message through our Contact form, we receive your name, email address, category, and message text to respond to your technical support or privacy inquiry.
3. Purposes and Legal Bases for Processing
We process your data strictly on the following lawful grounds:
- Service Execution (Contractual / Requested Service): Processing files, extracting tables, rendering formats, and delivering download streams requested by you.
- Security & Abuse Prevention (Legitimate Interest): Inspecting magic byte signatures to block spoofed executables, screening ZIP archives against decompression bomb exploits, rate limiting, and restricting concurrency.
- Consent: For optional AI features (AI Summarizer, Translate PDF), you explicitly initiate the submission of extracted text or page snapshots to Google Gemini.
- Legal Compliance: Retaining security records where required by applicable law or to defend against fraud and unauthorized exploitation.
4. File Handling, Temporary Storage & Deletion
We believe in full transparency regarding where your files reside and when they are deleted:
Where: Server temporary disk (/tmp/fileconverter-uploads)
Retention: Duration of conversion (seconds to minutes)
Trigger: Deleted immediately when conversion ends
Where: Server scratch directory (/tmp/fileconverter-out)
Retention: Duration of conversion
Trigger: Deleted immediately upon output generation
Where: Cloudflare R2 bucket (fileconverter-temp) or local fallback
Retention: 60 minutes retention window
Trigger: Automated 10m sweep or immediate user Delete button
Where: Job database (Cloudflare D1)
Retention: Matches file expiration (60 minutes)
Trigger: Purged simultaneously with the storage object
Where: Support email inbox (Gmail) & server log
Retention: Up to 90 days for support tracking
Trigger: Manual administrative deletion or upon user request
| Data Stage | Where Stored | Retention Window | Deletion Trigger |
|---|---|---|---|
| Original Uploaded File | Server temporary disk (/tmp/fileconverter-uploads) |
Duration of conversion (seconds to minutes) | Deleted immediately when conversion ends |
| Intermediate Working Files | Server scratch directory (/tmp/fileconverter-out) |
Duration of conversion | Deleted immediately upon output generation |
| Converted Download Output | Cloudflare R2 private cloud bucket (fileconverter-temp) or local fallback |
60 minutes retention window | Automated 10-minute sweep OR immediate user deletion via Delete button |
| Job Metadata (Token/Size) | Job database (Cloudflare D1) | Matches file expiration (60 minutes) | Purged simultaneously with the storage object |
| Support Inquiries | Support email inbox (Gmail) & server log | Up to 90 days for support tracking | Manual administrative deletion or upon user request |
5. Google Gemini AI Feature Disclosures
Fileora integrates the Google Gemini API to power three optional intelligence tools:
- AI Summarizer: Generates executive briefing summaries from document content.
- Translate PDF: Translates document text into over 20 languages.
- PDF to Excel Table Extraction: Locates tabular patterns in extracted text.
What Leaves Your Device When Using AI Features:
When you invoke an AI tool, we extract the document's raw text (truncated to maximum 150,000 characters) and/or up to 12 rendered page image snapshots (for scanned/diagrammatic documents), and transmit them via HTTPS to the Google Gemini API endpoint (generativelanguage.googleapis.com).
Your raw original file is NOT uploaded to Google. Standard conversion tools (Word to PDF, PDF to Word, PowerPoint, Excel, JPG, Compress, Merge) run entirely on local headless engines and never interact with Gemini.
Applicable Google Gemini Terms & Data Governance:
Google's processing of data sent to the Gemini API is governed by the Google Gemini API Terms of Service and Google's general Privacy Policy:
- Free Tier Usage: Under Google's free tier API terms, submitted prompts, responses, and related materials may be processed by human reviewers and used by Google to train and improve Google models and products.
- Paid Tier Usage: When paid billing is active on the API project, customer data is not used to train Google machine-learning models.
- Recommendation: Because API billing tiers depend on the Google Cloud project configuration, we advise visitors not to submit sensitive personal, legal, financial, or confidential information to the AI tools.
6. Third-Party Infrastructure Providers
We work with trusted infrastructure providers to deliver reliable and secure services:
7. Cookies, Analytics and Advertising
A. Current Status: Google AdSense is Planned, NOT Active
No advertising is currently active on Fileora. We do not load Google AdSense script tags (adsbygoogle.js), we do not set DoubleClick advertising cookies, and we do not serve personalized or non-personalized advertisements.
If and when Google AdSense is activated in the future, this Privacy Policy and our Cookie Policy will be updated prior to activation, and an appropriate Consent Management Platform (CMP) will be introduced in compliance with Google publisher requirements and local privacy laws.
B. Browser Analytics and Local Storage
We do not deploy browser tracking suites (such as Google Analytics or Meta Pixel). We use browser localStorage strictly to store your selected color mode (theme = 'light' or 'dark'). You can disable or clear this anytime via your browser settings.
8. Indian Privacy Framework (DPDPA 2023 & DPDP Rules 2025)
The operator of Fileora is an individual operating from India. Under the Digital Personal Data Protection Act, 2023 (DPDPA 2023) and the Digital Personal Data Protection Rules, 2025, we observe the following standards as an individual Data Fiduciary:
- Specified Purpose: Personal data (such as emails or documents containing personal data) is processed strictly for the requested conversion and temporary download delivery.
- Data Principal Rights: You have the right to request access to personal data, request correction or completion of inaccurate data, and request erasure of personal data under Section 12 of the DPDPA 2023.
- Immediate Self-Erasure: You can execute immediate data erasure of converted files using the "Delete" button on your download page without waiting for the 60-minute retention period.
- Grievance Redressal: In accordance with Section 13 of the DPDPA 2023, you may register a grievance regarding your personal data by emailing [email protected]. We will acknowledge and review your request.
- Regulatory Note: Because specific rules, enforcement dates, and the Data Protection Board of India are being notified in progressive phases by MeitY, we do not claim universal formal legal certifications, but maintain ongoing alignment with published statutory provisions.
9. International Privacy Rights (GDPR, CCPA/CPRA)
Depending on your location, you may have statutory rights regarding your personal information, including the right to access, rectify, port, or erase your data, or object to certain processing.
Because we do not maintain persistent user accounts, the most direct way to exercise your right to deletion is to click Delete on your converted file's download card, or allow the automated purge (60 minutes by default) to delete your file. For other requests, contact us at [email protected].
10. Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our conversion engines, cloud architecture, or legal obligations. When changes are made, the "Effective Date" and "Last Revised" timestamps at the top of this page will be updated. We encourage you to review this policy periodically.
11. Contacting the Operator
If you have questions, feedback, or data privacy requests concerning Fileora, please reach out via email: