Convert
Convert.FAST Current

Transform files between formats
Compress.FAST

Shrink files without losing quality
PDF.FAST Soon

Professional PDF tools
Extract.FAST

Pull images from documents
Tools.FAST

Your complete file toolkit

100

Privacy Policy

We collect minimal data, process it in the EU, and delete files automatically.

Last updated: February 2026

We collect only the minimum data necessary to convert your files. We use your data solely to provide our service. We do not read, look into, or mine any data from your files.

Who We Are

Convert.FAST is operated by Tools Fast Group (ABN 95 273 980 219), an Australian business. Convert.FAST is part of the Tools.FAST network of productivity tools.

What We Collect

Files You Upload

Files are uploaded to our EU servers solely for conversion. All file processing is fully automated — there is no human interaction with your files at any stage. We do not read, analyze, or mine your file contents. Filenames are retained only during processing and redacted to extension-only when files are deleted. All files are automatically deleted 1 hour after conversion, or immediately when you click delete.

Job Metadata

For billing and fraud prevention, we retain: job identifiers, conversion type, file sizes, duration (for audio/video), processing time, and credits consumed. We do not retain filenames, file contents, or extracted metadata (like image EXIF data or audio metadata including ID3 tags and cover art).

Account Data

If you create an account: email address, name, and authentication provider (e.g., Google). We use this to identify your account and send transactional emails.

Usage Data

Anonymous usage patterns: pages visited, conversion types used, and aggregate statistics. We use self-hosted Plausible Analytics—a privacy-first platform with no tracking cookies, no personal data collection, and no cross-site tracking.

We also use Microsoft Clarity to understand how visitors interact with our site. This helps us identify usability issues and improve the experience. Clarity data is anonymized and does not include personal information. For visitors in the EU/EEA, we ask for consent before activating Clarity.

IP Addresses

We hash IP addresses using HMAC-SHA256 before storing them. The irreversible hash is used for rate limiting and abuse prevention. We do not store raw IP addresses in job records or application logs.

Cookies

We use minimal cookies:

  • Session cookie — Maintains your login state (if signed in)
  • Anonymous session — Tracks usage limits for guests (hashed identifier, no personal data)
  • Cookie consent — Remembers your analytics preference (EU/EEA visitors only)

We do not use advertising cookies or cross-site tracking.

How We Use Your Data

The purpose of processing your uploaded files is solely to provide our conversion service. We do not use your files for AI training, analytics, profiling, or any purpose beyond the conversion you requested. Specifically, we use your data to:

  • Process file conversions you request
  • Calculate and debit credits from your account
  • Enforce rate limits and prevent abuse
  • Send transactional emails (account verification, password resets) and occasional product updates
  • Improve the service through aggregate analytics

Third Parties

We do not sell your data. We share minimal data with:

  • Stripe / Link — Payment processing and checkout
  • Google OAuth — Authentication (if you choose to sign in with Google)
  • Microsoft Clarity — Analytics (with consent for EU/EEA visitors)

For standard conversions (images, documents, ebooks, archives, fonts), all processing happens entirely on infrastructure we own. Your files never leave our servers. For AI-powered features (audio transcription), files are sent to vetted GDPR-compliant providers under strict Data Processing Agreements. These providers process files solely for your requested conversion and delete them immediately after. See our Security page for details.

Data Location

All file processing and storage occurs on servers physically located in the European Union. Your files stream encrypted (TLS 1.3) straight from your browser to our EU infrastructure.

Data Retention

  • Uploaded files: Deleted 1 hour after conversion (all tiers)
  • Job metadata: Retained for billing records and fraud prevention
  • Account data: Retained until you delete your account

Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access — Request a copy of your data
  • Rectification — Correct inaccurate data
  • Erasure — Delete your account and associated data
  • Portability — Export your job history
  • Object — Object to processing for direct marketing (you can unsubscribe from product updates anytime)
  • Restriction — Request we limit processing

To exercise any of these rights, email privacy@convert.fast. We respond within 30 days.

Security

See our Security page for details on encryption, data handling, and infrastructure security.

Children's Privacy

Convert.FAST is not intended for children under 16. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy occasionally. Significant changes will be announced via email to registered users.

Contact