Privacy Policy
Last updated: September 4, 2025
Our Commitment to You
We built conv4me to provide high-quality tools that make developers' lives easier. We're not here to harvest your data or maximize ad revenue - we're here to build something useful. This policy explains exactly how we handle your information, and we follow GDPR and privacy best practices because respecting your privacy is fundamental to what we do.
1. What We Collect and Why
Account Information
When you create an account, we collect only what's necessary to provide our service:
- Account Information: Username, email address, full name (optional)
- Authentication Data: Encrypted passwords or OAuth tokens (Google, etc.)
- Profile Information: User tier, preferences, and settings
- API Keys: Generated API keys for premium users (stored encrypted)
Usage Analytics
To improve our tools and ensure quality service, we track:
- Tool Usage: Which tools you use, frequency, and basic usage statistics
- Technical Data: IP address, browser type, device information, timestamps
- Performance Data: Response times, error logs (anonymized)
- Input/Output Sizes: Data size metrics for performance optimization (content not stored)
Your Tool Data
Zero Data Retention Policy: We never store, log, or retain any data you input into our tools. Whether you're converting data formats, generating content, or validating information - everything is processed in real-time and immediately discarded. Your sensitive data never touches our storage systems.
2. How We Use Your Information
Delivering Quality Service
Our primary goal is providing reliable, fast developer tools. We use your information to:
- Providing access to developer tools and features
- Managing user accounts and authentication
- Enforcing usage limits and tier restrictions
- Processing payments and managing subscriptions
Continuous Improvement
We're constantly working to build better tools. Analytics help us:
- Analyzing usage patterns to improve tools and performance
- Identifying and fixing technical issues
- Developing new features based on user needs
- Ensuring platform security and preventing abuse
Keeping You Informed
- Sending service updates and security notifications
- Responding to support requests
- Occasional updates about new tools or features (with your consent - you can always opt out)
3. Legal Basis for Processing (GDPR)
| Data Type | Legal Basis |
|---|---|
| Account & Authentication | Contract performance |
| Usage Analytics | Legitimate interest |
| Marketing Communications | Consent |
| Security & Fraud Prevention | Legitimate interest |
4. Data Sharing - The Reality
Essential Service Partners
We work with a minimal set of trusted partners to deliver our service:
- Authentication: Google OAuth (for Google Sign-In)
- Hosting: Cloud infrastructure providers
- Analytics: Usage analytics services (anonymized data only)
- Payment Processing: Stripe/PayPal (when implemented)
Our Business Model
We don't sell your data. Period. Our revenue comes from premium subscriptions, not from data harvesting or advertising. We built this platform to solve real developer problems, not to exploit user information for profit.
5. Data Security
- Encryption: All data transmitted via HTTPS/TLS
- Database Security: Encrypted storage and secure access controls
- Password Protection: Passwords are hashed using industry standards
- API Security: Rate limiting and authentication for all endpoints
- Regular Updates: Security patches and monitoring
6. Your Rights (GDPR)
Your Rights (No Bureaucracy)
GDPR gives you these rights, and we actually honor them:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a machine-readable format
- Restriction: Limit how we process your data
- Objection: Object to processing based on legitimate interest
- Withdraw Consent: Revoke consent for marketing communications
Want to exercise any of these rights? Just email us at privacy@conv4.me. We'll respond quickly (within 30 days max, but usually much faster) because we're humans, not a corporate machine.
7. Data Retention
- Account Data: Retained while your account is active
- Usage Analytics: Aggregated data retained for 2 years
- Tool Input Data: Never stored - immediately discarded
- Logs: Security and error logs retained for 12 months
- Deleted Accounts: All personal data deleted within 30 days
8. Cookies and Tracking
Cookie Consent
When you first visit our website, you'll see a cookie consent banner giving you control over which cookies we can use. You can choose to accept all cookies or only essential ones required for the site to function.
Your cookie preferences are stored for 365 days. You can change your preferences at any time by clearing your browser cookies and revisiting our site to see the banner again.
8.1 Essential Cookies
These cookies are necessary for the website to function and cannot be disabled:
- Authentication (access_token, refresh_token): JWT tokens for secure login sessions
- Cookie Consent (cookie_consent): Stores your cookie preferences to remember your choice
- Security: CSRF protection tokens to prevent cross-site attacks
- Preferences: UI settings and user preferences for better experience
8.2 Analytics Cookies (Optional)
These cookies help us understand how users interact with our platform. You can opt out of these through the cookie consent banner when you first visit the site, or by declining analytics cookies:
- Usage Analytics: Track which tools are most popular and how users navigate the site
- Performance Monitoring: Measure page load times and identify performance issues
- Error Tracking: Help us identify and fix bugs faster
You can also disable cookies through your browser settings at any time. Note that disabling essential cookies may affect site functionality, including the ability to log in.
9. International Transfers
Your data may be processed in countries outside the EEA. We ensure adequate protection through:
- EU-US Data Privacy Framework compliance
- Standard Contractual Clauses with service providers
- Adequacy decisions by the European Commission
10. Children's Privacy
Our service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent and believe your child has provided personal information, please contact us immediately.
11. Changes to This Policy
We may update this privacy policy periodically. Material changes will be notified through:
- Email notification to registered users
- Prominent notice on our website
- Update to the "Last updated" date above
12. Contact Information
Data Controller
conv4me
Email: privacy@conv4.me
Support: support@conv4.me
Data Protection Officer
For GDPR-related inquiries, contact our DPO at: dpo@conv4.me
Questions?
If you have questions about this privacy policy or how we handle your data, please don't hesitate to contact us. We're committed to transparency and protecting your privacy.