Last updated 26 September 2026 · Effective from 1 September 2026
What we collect
Files you upload, for as long as it takes to process them. Basic technical information such as your browser type, approximate country and the pages you visit. If you create an account, your name and email address.
We do not collect the contents of your files as data. They are processed and deleted.
If you are signed in and save something (an invoice, a client, a logo, an attachment, a QR code), we keep it in your account until you delete it. Your clients’ details are entered by you; we use them only to do what you ask, such as emailing them an invoice or a reminder you switched on. When a client opens a link you shared, we record that it was opened, with the address hashed.
Signing in with Google or Facebook
If you choose “Continue with Google” or “Continue with Facebook”, that provider tells us your name, your email address and an account number that identifies you to us. That is all we ask for and all we keep: we do not receive your password, contacts, friends, photos or posts, we cannot post anything for you, and we do not store the provider’s access token.
If you are signed in to Google in your browser, Google may offer a “Sign in with Google” prompt in the corner of our pages; nothing is shared with us unless you choose to continue. We use this only to sign you in and to recognise the same person next time. You can disconnect a provider in your dashboard under Security, and remove Convertavo from your Google account or Facebook settings at any time. How to delete everything is explained on our data deletion page.
Spam protection
Our sign-up, log-in and contact forms may use Google reCAPTCHA or Cloudflare Turnstile to tell people from bots. The provider sees technical details of your visit (such as your IP address and browser) to make that check; Google’s privacy policy and terms apply to reCAPTCHA. We receive only a yes-or-no answer.
How long we keep files
Uploaded files and their converted results are deleted automatically one hour after processing finishes. This is enforced by an automated job, not by a person remembering to do it.
What you save to your account is the exception. Invoices (with their PDFs, history and payments), clients, logos, attachments and saved QR codes stay until you delete them or your account. A deleted draft is erased for good after 30 days. Issued invoices can be cancelled but not deleted, so their numbers stay on record; they go when you delete your account. Webhook delivery logs are kept 30 days. Tax rules often require keeping invoices for years, so keep your own copies.
Cookies and advertising
We use essential cookies to keep you logged in and to remember your theme preference. We use analytics cookies to understand which tools people use, and advertising cookies served by our advertising partners.
You can change your choices at any time through the cookie settings link in the footer. Declining advertising cookies does not restrict any tool.
Third parties
We share data with a small number of processors: our hosting provider, Paddle.com, our Merchant of Record, which handles payment and billing details for paid plans (we never receive your full card number), and our advertising and analytics partners — and Google or Facebook, only if you choose to sign in with them. We do not sell personal data to anyone.
Your rights
- Request a copy of the data we hold about you
- Correct anything that is wrong
- Delete your account and everything attached to it
- Object to processing, or ask us to restrict it
- Withdraw consent for marketing at any time
You can delete your account yourself at any time from your dashboard (Profile → Delete account); see the data deletion page. To exercise any other right, email us and we will respond within 30 days.
Children
This service is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, tell us and we will remove it.
Changes to this policy
If we change anything material, we will update the date at the top and notify account holders by email at least 14 days before it takes effect.
Contact
Questions about this policy go to support@convertavo.com, or use the contact form.