Veldra Convert

Privacy policy

What we collect, why, and for how long.

Who we are

Veldra Convert is an online file-conversion service operated by Veldra Labs, based in Tallinn, Estonia. We convert documents, images and audio — PDF, DOCX, XLSX, PPTX, JPG, PNG, WEBP, HEIC, MP3, WAV and FLAC — in your browser, quickly and privately. This policy sets out, in plain terms, what data we handle, why we handle it, and for how long. Privacy is not an add-on to this service; it is a design principle.

What we collect

We minimise what we collect to what the service genuinely requires.

  • Anonymous use. You can convert files on the free plan without an account. In that case, we hold no personal data about you beyond the short-lived server logs described below.
  • Paid accounts. If you subscribe to Pro ($6/month) or Team ($19/month), we store your email address, your plan details and the invoices we issue to you. Free users do not have accounts with us.
  • Payments. Payments are handled by a third-party payment processor. Card details are entered on the processor's own systems, and we never receive or store full card numbers.
  • Server logs. Our servers record the IP address, timestamp and request path of each request. We use these records only for security and to prevent abuse.

Your files

Your files are at the heart of the service, and we treat them accordingly.

  • Uploaded files and converted results are deleted automatically 2 hours after conversion. Deletion is permanent; neither you nor we can recover anything after that point.
  • Your files are never used to train models, never shared with third parties and never inspected by our staff. No one at Veldra Labs looks at the content you convert.
  • Because deletion is automatic and irreversible, please keep your own copies of anything you may need later.

Cookies and tracking

We set exactly one cookie: a strictly necessary session cookie that keeps signed-in users logged in. That is the complete list. To be explicit:

  • No analytics, no advertising trackers, no fingerprinting.
  • No third-party scripts and no web fonts loaded from other domains; everything the page needs is served by us.
  • Anonymous users receive no cookie at all, because there is no session to maintain.

The session cookie is removed when you sign out or when your session expires.

Legal bases

We process personal data on the following legal bases under the GDPR:

  • Performance of a contract: your email address, plan and account details, processed to provide the subscription you signed up for.
  • Legitimate interests: short-lived server logs, kept to protect the service against attacks, abuse and fraud. Given the limited data involved and the 14-day retention, we consider this proportionate and weighed against your interests.
  • Legal obligations: invoice records, kept where Estonian accounting and tax law requires it.

We do not rely on consent for tracking or marketing, because we do neither.

How long we keep data

  • Files and conversion results: 2 hours after conversion, automatically.
  • Server logs: 14 days, then deleted.
  • Account data: for as long as your subscription is active. If you cancel, we delete your account data within 30 days, except for invoice records we must retain under Estonian law.

Your rights

You have the following rights under the GDPR:

  1. Access — to obtain a copy of the personal data we hold about you.
  2. Rectification — to have inaccurate or incomplete data corrected.
  3. Erasure — to have your data deleted, for instance when you close your account.
  4. Restriction — to ask us to pause processing while a question is resolved.
  5. Portability — to receive your data in a structured, commonly used, machine-readable format.
  6. Objection — to object to processing that relies on our legitimate interests.
  7. Complaint — to lodge a complaint with a supervisory authority.

Our supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon); you may also complain in the EU member state where you live or work. To exercise any of these rights, write to hello@nl0.n1kromant.ru. We aim to respond within 30 days.

Changes to this policy

We may update this policy as the service evolves; the current version is always published on this page. If a change materially affects account holders, we will notify them by email before it takes effect.

Contact

Veldra Labs, Tallinn, Estonia, operates Veldra Convert. This policy, and our processing of personal data, are governed by the laws of Estonia. For any privacy question, request or complaint, write to hello@nl0.n1kromant.ru. We read every message and will reply.