In transit
All traffic runs over HTTPS with TLS 1.3. Your image cannot be read by anyone observing the network, including on public Wi-Fi.
At rest
Files live in temporary processing storage, isolated per job. They are deleted when you download the result, and swept automatically within 24 hours regardless. There is no archive tier and no long-term bucket.
Never used for training
Your image content is not added to any dataset, not used to train or fine-tune any model, and not sampled for product analytics. The conversion engine transforms bytes; it does not treat your photo as an example of anything.
Metadata you control
Images often carry EXIF data including camera serial numbers and GPS coordinates. Every converter offers a strip-metadata option, and it is on by default for web-bound formats.
The one exception
If you contact support about a failed conversion, we may inspect that single job to reproduce the error — and only with your explicit consent, and only that job.