Privacy Policy
This Privacy Policy explains how AllConverter.tools collects, uses, discloses, and protects information about you when you use our platform. We are committed to handling your data transparently and in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and other applicable Indian privacy laws.
Who We Are
AllConverter.tools operates the website located at allconverter.tools — a free online platform providing browser-based utility tools including PDF conversion and editing, image processing, text utilities, developer tools, SEO analysis, business document generation, AI-assisted content creation, and financial calculators.
For the purposes of the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000, AllConverter.tools is the Data Fiduciary responsible for personal data collected through this website.
Controller: AllConverter.tools
Address: Mumbai, Maharashtra, India
Privacy contact: privacy@allconverter.tools
Data Protection Officer: dpo@allconverter.tools
What Data We Collect
Data we collect automatically
When you visit AllConverter.tools, our web infrastructure and analytics providers collect certain technical data automatically:
| Data type | Details | Collected by |
|---|---|---|
| IP address | Anonymised to city/region level before storage — full IP is not retained | Google Analytics 4 |
| Browser & device type | Browser name, version, operating system, screen resolution, device category | Google Analytics 4 |
| Pages visited | Which pages and tools you accessed, in what sequence, and for how long | Google Analytics 4 |
| Referrer URL | The website or search engine that directed you to AllConverter.tools | Google Analytics 4 |
| Geographic location | Country and approximate city derived from anonymised IP data | Google Analytics 4 |
| Session data | Session duration, bounce rate, pages per session — aggregated metrics only | Google Analytics 4 |
| Ad interactions | Whether ads were displayed, viewed, or clicked — used for billing between Google and advertisers | Google AdSense |
Data you provide directly
AllConverter.tools does not require user registration. We have no sign-up forms, login systems, or account infrastructure. The only data you may voluntarily provide is:
- An API key for the Google PageSpeed Insights API, if you choose to enter one in the Website Speed Checker tool — this is stored only in your browser's local storage and is never transmitted to our servers
- Contact information if you email us directly at our support or legal addresses — retained only for the purpose of responding to your enquiry
Data we do not collect
- The content of any files you process using our tools (PDFs, images, audio files, documents)
- Text, code, or data you enter into any tool input fields
- AI-generated outputs you receive or download
- Financial figures or personal details entered into calculators
- Names, email addresses, or any personally identifiable information beyond what is noted above
How We Use Your Data
We use the limited data we collect for the following purposes:
| Purpose | Data used | Basis |
|---|---|---|
| Platform analytics | Anonymised usage metrics — page views, tool usage counts, session data | Legitimate interest / Consent |
| Service improvement | Aggregate data on which tools are used, performance patterns, error rates | Legitimate interest |
| Advertising delivery | AdSense cookie data for contextual or personalised ad serving | Consent |
| Security & fraud prevention | IP-level patterns used to detect abnormal traffic or abuse | Legitimate interest |
| Legal compliance | Retaining records necessary to comply with applicable law or legal process | Legal obligation |
| Responding to enquiries | Email address and message content when you contact us directly | Contract / Legitimate interest |
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects. We do not sell your data to any third party. We do not use data collected on AllConverter.tools to build individual user profiles for commercial purposes.
Legal Basis for Processing
Under the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000, we are required to have a lawful basis for processing personal data. Our bases for each processing activity are as follows:
| Processing activity | Legal basis | Applicable law |
|---|---|---|
| Google Analytics 4 — usage analytics | Consent (where obtained); Legitimate use — anonymised aggregate statistics | DPDPA 2023, S. 4 & 7 |
| Google AdSense — advertising | Consent | DPDPA 2023, S. 6 |
| Security monitoring and abuse prevention | Legitimate use — protecting platform integrity and safety | IT Act 2000, S. 43A |
| Responding to direct enquiries | Contractual necessity / Legitimate use | DPDPA 2023, S. 4 |
| Legal and regulatory compliance | Legal obligation under applicable Indian law | DPDPA 2023, S. 7(b) |
Where we rely on consent as our legal basis — principally for analytics and advertising cookies — you have the right to withdraw that consent at any time without detriment. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal. See Section 11 for how to exercise this right.
Where we rely on legitimate use, we have assessed that our interests do not override your rights as a Data Principal, given the minimal and anonymised nature of the data involved and the reasonable expectations of users of a free online tools platform.
Third-Party Services
We work with a small number of trusted third-party services. Each is listed below with a description of what data they receive and a link to their own privacy documentation.
We do not embed social media plugins, comment platforms, chat widgets, or any other third-party service beyond those listed above. If additional integrations are introduced, this policy will be updated before deployment.
Data Sharing & Disclosure
We do not sell, rent, trade, or otherwise commercially transfer your personal data to any third party. Data is shared only in the limited circumstances described below.
- Service providers: Google Analytics and Google AdSense receive anonymised analytics and advertising data as described in Section 6. They act as independent data controllers under their own policies.
- Legal obligations: We may disclose data where required to do so by law, court order, regulatory authority, or to protect the rights, property, or safety of AllConverter.tools, its users, or the public.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred to the acquiring entity. We will notify users via a notice on this website before data becomes subject to a different privacy policy.
- With your consent: We may share data in other ways if you have given specific prior consent for a clearly identified purpose.
Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.
| Data category | Retention period | Rationale |
|---|---|---|
| Google Analytics data | 14 months (GA4 default) | Standard analytics data expiry set in GA4 account settings |
| Google AdSense data | Governed by Google | AdSense data retention is managed entirely by Google under their policies |
| Email enquiries | 3 years from last contact | Reasonable limitation period for dispute resolution |
| Server access logs | 30 days | Short-term security monitoring only; auto-purged by hosting infrastructure |
| Browser local storage (API keys) | Until you clear browser storage | Stored only on your device — we have no access or control |
We do not retain any file content, document data, calculator inputs, or tool-generated outputs — these exist only in your browser session and are never transmitted to us.
When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with an individual. You may request early deletion of any personal data we hold about you — see Section 11.
Security Practices
We take the security of your data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.
Technical measures
- All connections to AllConverter.tools are encrypted using TLS 1.2 or higher, with TLS 1.3 preferred
- HTTP Strict Transport Security (HSTS) prevents protocol downgrade attacks
- Static assets are delivered via a CDN with edge-level DDoS protection
- All tool processing occurs client-side in your browser — no file data touches our infrastructure
- We do not operate databases containing personal data beyond what third-party analytics services collect under their own security controls
Organisational measures
- Access to platform infrastructure is restricted to authorised personnel only
- Third-party services are selected based on their own security and privacy standards
- We maintain a responsible disclosure process for security vulnerabilities — see our Security page
No method of data transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable means to protect your data, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in harm to Data Principals, we will notify the Data Protection Board of India and affected individuals as required under the Digital Personal Data Protection Act, 2023, and any rules or directions issued thereunder. For more detail, see our Security page.
International Data Transfers
AllConverter.tools is operated from India. Some of our third-party service providers — principally Google LLC (United States) for Analytics and AdSense — process data outside India. Under the Digital Personal Data Protection Act, 2023, cross-border transfers of personal data are permitted to countries notified by the Central Government as providing adequate protection.
Until the Government of India publishes the finalised list of permitted transfer destinations, we rely on the following safeguards for data transferred to Google:
- Google LLC's contractual data processing terms, which impose obligations on Google consistent with applicable privacy law
- Google's adherence to the EU–US Data Privacy Framework provides an additional layer of independent certification for data flows to the United States
- Anonymisation of analytics data before transmission — full IP addresses are never sent to Google
All tool processing occurs locally in your browser — no file content or tool input is transferred internationally or to any server. You can obtain further information about our international transfer safeguards by contacting us at privacy@allconverter.tools.
Your Rights
As a Data Principal under the Digital Personal Data Protection Act, 2023, and as a user protected by the Information Technology Act, 2000, you have the following rights with respect to your personal data. We will respond to all valid requests within 30 days of receipt.
| Right | What it means | How to exercise |
|---|---|---|
| Right to access (DPDPA S. 11) | Obtain a summary of personal data we hold about you and the purposes for which it is being processed. | Email privacy@allconverter.tools |
| Right to correction (DPDPA S. 12) | Request correction or completion of inaccurate, incomplete, or outdated personal data. | Email privacy@allconverter.tools |
| Right to erasure (DPDPA S. 12) | Request deletion of personal data that is no longer necessary for the purpose it was collected, subject to legal retention obligations. | Email privacy@allconverter.tools |
| Right to grievance redressal (DPDPA S. 13) | Raise a grievance regarding processing of your personal data and receive a response within the prescribed period. | Email privacy@allconverter.tools |
| Right to nominate (DPDPA S. 14) | Nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity. | Email privacy@allconverter.tools |
| Right to withdraw consent | Withdraw consent for analytics or advertising cookies at any time without penalty. Withdrawal does not affect prior lawful processing. | Use browser settings or cookie controls |
| Right to complain to the Data Protection Board | If your grievance is not resolved, you may file a complaint with the Data Protection Board of India. | Via the Board's official portal once operational |
Some rights apply only in specific circumstances and are subject to exemptions under the DPDPA and IT Act. Where data is held by third-party processors such as Google, we will direct you to their tools and contact points to exercise your rights with those processors directly.
We will not charge a fee for handling rights requests unless they are repetitive or manifestly unfounded, in which case we may charge a reasonable administrative fee or decline to act, with written reasons provided.
Children's Privacy
AllConverter.tools is not directed at children under the age of 13 (or a higher minimum age as required by local law). We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child below the applicable minimum age, we will take prompt steps to delete that data.
If you are a parent or guardian and believe that your child has provided personal data to us, please contact us at privacy@allconverter.tools and we will take appropriate action.
Changes to This Policy
We review and update this Privacy Policy periodically to reflect changes in our practices, services, or applicable law. When we make material changes, we will:
- Update the effective date at the top of this page
- Display a prominent notice on the homepage for a reasonable period following material changes
- Where required by law, seek fresh consent for any new processing activities
We encourage you to review this page periodically. Your continued use of AllConverter.tools after changes are posted constitutes acceptance of the updated policy, to the extent permitted by applicable law.
Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us using the details below. We aim to acknowledge all privacy-related enquiries within 5 business days and resolve them within 30 days.
Related policies