Privacy Policy

1. Introduction

We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our HEIC converter service.

This policy complies with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data We Collect

2.1 Images You Upload

When you use our conversion service, you upload HEIC images. These images are:

• Temporarily stored on our servers during processing
• Automatically deleted immediately after conversion
• Never used for any purpose other than providing the conversion service
• Never shared with third parties

2.2 Payment Information

When you purchase premium features, payment processing is handled by Stripe. We collect:

• Email address (for receipt and access)
• Payment confirmation details

We do NOT store your credit card information. All payment data is securely handled by Stripe.

2.3 Technical Data

We automatically collect certain technical information:

• IP address
• Browser type and version
• Device information
• Usage statistics (anonymized)

3. How We Use Your Data

We use your data to:

• Provide and maintain the Service
• Process your payments and provide access to premium features
• Send you receipts and service-related communications
• Improve and optimize our Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract performance: To provide the Service you requested
• Legitimate interests: To improve our Service and prevent fraud
• Legal obligation: To comply with tax and financial regulations
• Consent: For marketing communications (if you opt in)

5. Data Retention

• Uploaded images: Deleted immediately after processing (within minutes)
• Payment records: Retained for 7 years for tax compliance
• Technical logs: Retained for 90 days

6. Data Sharing and Third Parties

We share data only with:

• Stripe: For payment processing (see Stripe's privacy policy)
• Google Cloud Platform: For hosting infrastructure

We do NOT sell your data to third parties. We do NOT use your images for training AI models or any other purpose.

7. Your Rights (GDPR)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: At any time, where processing is based on consent

To exercise these rights, contact us at privacy@yourheicconverter.com

8. Cookies

We use essential cookies to maintain your session and preferences. We do not use tracking or advertising cookies without your consent.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• SSL/TLS encryption for data in transit
• Encrypted storage
• Regular security audits
• Access controls and authentication

10. International Data Transfers

Your data may be processed in countries outside the EU. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Appropriate safeguards

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through the Service.

12. Contact Us

For privacy-related questions or to exercise your rights:

Email: privacy@yourheicconverter.com

You also have the right to lodge a complaint with your local data protection authority.