Privacy policy

The short version

• Files you convert in your browser never leave your device. The counter under the file list shows every byte the page sends, and for these files it stays at 0.
• We never sell data, show ads, or use tracking cookies. File names and file contents never go into our analytics or error reports.
• When a file needs our servers, we ask first, and we delete it on a fixed schedule (below).

Who we are

FormatJet is run by Taprobane Labs, LLC (“we”, “us”). For anything about privacy, write to hello@formatjet.com.

Your files

Converted in your browser

Most conversions run on your device, inside your browser. The file is read and converted there and is never sent to us. Photo location data is removed by default; you can turn that off before converting.

The home page’s converter passes the files you choose to the converter page through your browser’s own storage. They stay on your device and are deleted as soon as that page opens.

Converted on our servers

Some files can’t be converted in a browser. Before anything is uploaded, the page tells you where the file is processed and when it’s deleted, and uploads only after you confirm. Files are stored in Cloudflare R2 in the United States and processed there by our conversion engines on Cloudflare.

• The file you upload is deleted as soon as its conversion finishes.
• On the website, the converted file is deleted 60 minutes after you first download it, or 24 hours after the conversion if nobody downloads it. On Pro and through the API it’s deleted 24 hours after the conversion by default; API customers can choose up to 7 days.
• “Delete now” removes your files at once and gives you a deletion receipt.

Files are used only to convert them. No person looks at them, and we never use them to train any model.

Usage statistics

For each conversion, the page sends one anonymous record: which converter ran, the engine and its version, the file sizes, how long it took, and whether it worked (with an error code if not). It contains no file names, file contents or account details, and it’s sent without cookies. We keep these records in Cloudflare Analytics Engine for 3months to see which converters people use and where they fail.

Page views

We count page views and page speed with Cloudflare Web Analytics, which doesn’t use cookies and doesn’t follow you across websites.

Error reports

When something breaks, the page sends an error report to Sentry so we can fix it. Before it leaves the page we remove file names, web addresses’ query strings, cookies, request headers and user details, and Sentry removes IP addresses on arrival. Error reports are kept for up to90 days. The upload counter lists them under “Error reports”.

Your account

You don’t need an account to convert files. If you create one, we keep your email address, your sign-in sessions, your plan and credits, and a history of the conversions you ran on our servers (the conversion and its options, the files’ sizes and types, credits used and whether it worked; never file names or contents) for 30 days. Daily totals (conversions, credits and bytes) and your credit history, which names the conversions that used credits, stay with your account until you delete it. We email you a sign-in link through Resend, which keeps a record of the delivery for 30 days.

We set cookies only to keep you signed in and, if you convert a file on our servers without an account, to count that day’s server conversions: a random ID, kept for 12 months, that isn’t linked to you or your IP address. Cloudflare, which hosts the site, may set a security cookie to tell people from bots.

If you delete your account, we delete your files, API keys and personal data within 30 days, keeping only the billing records the law or our payment provider requires.

Messages to us

When you email us or use our contact form, we receive your email address, your name if you give it, and what you write. The form first runs a bot check (Cloudflare Turnstile), then sends your message to our support mailbox through Resend, which keeps a copy for 30 days. The form takes no attachments, and what you write never goes into our logs, usage statistics or error reports.

Our mailbox runs on Cloudflare, in its Asia-Pacific region. We use your message only to answer you, and keep it with our replies for up to 24 months, then delete it.

Payments

Pro and credit packs are sold through Link, Stripe’s checkout service, which is the merchant of record. When you start a checkout, we send Stripe your account’s email address and your organisation’s FormatJet ID, so the payment can be matched to your account. You enter your card or other payment details on Stripe’s checkout page: we never see or store them.

Stripe tells us what you bought, your plan’s status and billing period, and whether a payment went through, was refunded or was disputed, and we keep that with your account. Your receipts and invoices come from Link, which also handles payment questions and refund requests. Stripe uses what it collects at checkout under Link’s terms and Stripe’s privacy policy, as a controller in its own right.

Server logs and security

Our servers keep request logs (the address requested, the response and its timing, never file names) for 7 days. We use your IP address briefly to limit abuse, such as too many requests in a minute; we don’t store it with your account.

Who processes data for us

• Cloudflare: hosting, file storage, conversion engines, usage statistics, page views and our mailbox.
• Sentry: error reports.
• Resend: sign-in emails and contact-form messages.
• Stripe, through Link: payments for Pro and credit packs, as the merchant of record.

They process data only to provide these services to us, apart from Stripe’s own use of payment data described above. Our subprocessors page says what each one handles and where. Some are in the United States; where data from the EU or UK goes there, it’s covered by the safeguards those laws require.

Your rights

You can ask us to show you the personal data we hold about you, correct it, export it or delete it, and you can object to how we use it. Write to hello@formatjet.com; we reply within 30 days. If you’re in the EU or UK, we rely on our contract with you for accounts and on legitimate interests for security and anonymous statistics, and you can complain to your data protection authority.

Children

FormatJet isn’t meant for children under 13, and we don’t knowingly collect their data.

Changes

If we change this policy, we’ll update the date at the top. If a change affects how we use data we already hold, we’ll tell account holders by email first.