Convert.FAST
50

Privacy Policy

We collect minimal data, process it in the EU, and delete files automatically.

Last updated: December 2025

Who We Are

Convert.FAST is operated by Tools Fast Group (ABN 95 273 980 219), an Australian business. Convert.FAST is part of the Tools.FAST network of productivity tools.

What We Collect

Files You Upload

Files are uploaded to our EU servers for conversion. We store only the file extension (not filenames) and delete all files automatically after 1 hour—or immediately when you click delete.

Job Metadata

For billing and fraud prevention, we retain: job identifiers, conversion type, file sizes, duration (for audio/video), processing time, and credits consumed. We do not retain filenames, file contents, or extracted metadata (like image EXIF data or audio metadata including ID3 tags and cover art).

Account Data

If you create an account: email address, name, and authentication provider (e.g., Google). We use this to identify your account and send transactional emails.

Usage Data

Anonymous usage patterns: pages visited, conversion types used, and aggregate statistics. We use self-hosted Plausible Analytics—a privacy-first platform with no tracking cookies, no personal data collection, and no cross-site tracking.

We also use Microsoft Clarity to understand how visitors interact with our site. This helps us identify usability issues and improve the experience. Clarity data is anonymized and does not include personal information. For visitors in the EU/EEA, we ask for consent before activating Clarity.

IP Addresses

We use hashed IP addresses for rate limiting and abuse prevention. We do not store raw IP addresses in logs.

Cookies

We use minimal cookies:

  • Session cookie — Maintains your login state (if signed in)
  • Anonymous session — Tracks usage limits for guests (hashed identifier, no personal data)
  • Cookie consent — Remembers your analytics preference (EU/EEA visitors only)

We do not use advertising cookies or cross-site tracking.

How We Use Your Data

  • Process file conversions you request
  • Calculate and debit credits from your account
  • Enforce rate limits and prevent abuse
  • Send transactional emails (account verification, password resets) and occasional product updates
  • Improve the service through aggregate analytics

Third Parties

We do not sell your data. We share minimal data with:

  • Cloudflare — DDoS protection and CDN
  • Stripe — Payment processing
  • Google OAuth — Authentication (if you choose to sign in with Google)
  • Microsoft Clarity — Analytics (with consent for EU/EEA visitors)

File processing happens entirely on our infrastructure. We never send your files to third-party APIs.

Data Location

All file processing and storage occurs on servers physically located in the European Union. Your files are encrypted in transit via Cloudflare's TLS and processed entirely on our EU infrastructure.

Data Retention

  • Uploaded files: Deleted 1 hour after conversion (all tiers)
  • Job metadata: Retained for billing records and fraud prevention
  • Account data: Retained until you delete your account

Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access — Request a copy of your data
  • Rectification — Correct inaccurate data
  • Erasure — Delete your account and associated data
  • Portability — Export your job history
  • Object — Object to processing for direct marketing (you can unsubscribe from product updates anytime)
  • Restriction — Request we limit processing

To exercise any of these rights, email privacy@convert.fast. We respond within 30 days.

Security

See our Security page for details on encryption, data handling, and infrastructure security.

Children's Privacy

Convert.FAST is not intended for children under 16. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy occasionally. Significant changes will be announced via email to registered users.

Contact