What We Log
For each conversion job, we retain minimal metadata required for billing, diagnostics, and service improvement:
| Data | Purpose |
|---|---|
| Job ID | Unique identifier for support requests and debugging |
| Conversion type | E.g., "HEIC to JPG", "M4B to MP3" — for analytics |
| File size (input) | Bytes uploaded — for credit calculation |
| File size (output) | Bytes generated — for analytics |
| Resolution (images only) | Width × height before/after — for analytics |
| Page count (documents only) | Number of pages — for credit calculation |
| Duration (audio/video only) | Length in seconds — for credit calculation |
| Processing time | Milliseconds to convert — for performance monitoring |
| Credits consumed | For billing and usage tracking |
| Timestamp | When job was submitted — for billing cycles |
| Status | Completed, failed, etc. — for diagnostics |
What We Never Log
We explicitly do not store or log:
- ✕ File names — We never store the original filename. Jobs use random UUIDs.
- ✕ File contents — No thumbnails, previews, or content hashes are retained after processing.
- ✕ AI training data — We do not train machine learning models on your files. Ever.
- ✕ File metadata (images) — EXIF data (GPS, camera settings, timestamps) is stripped and discarded.
- ✓ File metadata (audio) — ID3 tags (artist, album, title, cover art) and chapters are preserved in output for playback organization, but not logged by us.
- ✕ IP addresses — Not stored in job records (only in short-lived server logs).
Why We Log Anything
We retain minimal job metadata because:
- Billing accuracy: Credits are calculated from file sizes and page counts
- Support requests: Job IDs let us investigate failed conversions
- Service improvement: Aggregate analytics help us optimize performance
- Fraud prevention: Detecting abuse patterns without identifying individuals
Data Retention Period
Individual job records (Job ID, file sizes, timestamps) are retained indefinitely for billing accuracy, support purposes, and internal analytics to improve our service and power live counters such as "X files converted". We do not store filenames, EXIF data, or any other file metadata — only the minimum required to calculate credits and investigate issues.
Aggregate statistics (total conversions, format popularity, processing trends) are retained indefinitely for service analytics and public counters. These contain no personally identifiable information.
Your actual files are deleted much sooner — see How long do you keep my files? for details.
Privacy by Design
Our approach: log the minimum required for the service to function, nothing more. If we don't need it, we don't collect it.
- No file names = can't correlate jobs to specific documents
- No content = nothing sensitive survives beyond processing
- No AI training = your files are yours alone