Legal

Privacy Policy

This Privacy Policy explains how AllConverter.tools collects, uses, discloses, and protects information about you when you use our platform. We are committed to handling your data transparently and in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and other applicable Indian privacy laws.

Effective date: 1 June 2025Data controller: AllConverter.toolsContact: privacy@allconverter.tools
01

Who We Are

AllConverter.tools operates the website located at allconverter.tools — a free online platform providing browser-based utility tools including PDF conversion and editing, image processing, text utilities, developer tools, SEO analysis, business document generation, AI-assisted content creation, and financial calculators.

For the purposes of the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000, AllConverter.tools is the Data Fiduciary responsible for personal data collected through this website.

Controller: AllConverter.tools

Address: Mumbai, Maharashtra, India

Privacy contact: privacy@allconverter.tools

Data Protection Officer: dpo@allconverter.tools

02

What Data We Collect

Core principle: Our tools process all files and content locally in your browser. No file content, document text, or uploaded data is transmitted to our servers. What we collect is limited to technical interaction data and is described in full below.

Data we collect automatically

When you visit AllConverter.tools, our web infrastructure and analytics providers collect certain technical data automatically:

Data typeDetailsCollected by
IP addressAnonymised to city/region level before storage — full IP is not retainedGoogle Analytics 4
Browser & device typeBrowser name, version, operating system, screen resolution, device categoryGoogle Analytics 4
Pages visitedWhich pages and tools you accessed, in what sequence, and for how longGoogle Analytics 4
Referrer URLThe website or search engine that directed you to AllConverter.toolsGoogle Analytics 4
Geographic locationCountry and approximate city derived from anonymised IP dataGoogle Analytics 4
Session dataSession duration, bounce rate, pages per session — aggregated metrics onlyGoogle Analytics 4
Ad interactionsWhether ads were displayed, viewed, or clicked — used for billing between Google and advertisersGoogle AdSense

Data you provide directly

AllConverter.tools does not require user registration. We have no sign-up forms, login systems, or account infrastructure. The only data you may voluntarily provide is:

  • An API key for the Google PageSpeed Insights API, if you choose to enter one in the Website Speed Checker tool — this is stored only in your browser's local storage and is never transmitted to our servers
  • Contact information if you email us directly at our support or legal addresses — retained only for the purpose of responding to your enquiry

Data we do not collect

  • The content of any files you process using our tools (PDFs, images, audio files, documents)
  • Text, code, or data you enter into any tool input fields
  • AI-generated outputs you receive or download
  • Financial figures or personal details entered into calculators
  • Names, email addresses, or any personally identifiable information beyond what is noted above
03

How We Use Your Data

We use the limited data we collect for the following purposes:

PurposeData usedBasis
Platform analyticsAnonymised usage metrics — page views, tool usage counts, session dataLegitimate interest / Consent
Service improvementAggregate data on which tools are used, performance patterns, error ratesLegitimate interest
Advertising deliveryAdSense cookie data for contextual or personalised ad servingConsent
Security & fraud preventionIP-level patterns used to detect abnormal traffic or abuseLegitimate interest
Legal complianceRetaining records necessary to comply with applicable law or legal processLegal obligation
Responding to enquiriesEmail address and message content when you contact us directlyContract / Legitimate interest

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects. We do not sell your data to any third party. We do not use data collected on AllConverter.tools to build individual user profiles for commercial purposes.

05

Cookies & Tracking Technologies

AllConverter.tools uses cookies and similar tracking technologies. A full description of each cookie, its purpose, type, and retention period is provided in our Cookie Policy. The summary below covers the three categories of cookies in use on this platform.

Essential cookies

Strictly necessary for the platform to function — including theme preferences and Next.js session state. These do not require consent and cannot be disabled while using the site.

Analytics cookies (Google Analytics 4)

GA4 cookies (_ga, _gid) collect anonymised usage data. IP anonymisation is enabled. We have not activated advertising features, remarketing, or cross-site tracking within GA4. Analytics cookies require your consent where mandated by applicable law.

Advertising cookies (Google AdSense)

AdSense may set cookies to serve contextually relevant or personalised advertisements. If you have not consented to personalised advertising, Google will serve non-personalised ads using page context only — no cross-site tracking occurs. You can manage your advertising preferences at Google Ad Settings.

For detailed cookie tables, opt-out instructions, and browser-level controls, see our Cookie Policy.

06

Third-Party Services

We work with a small number of trusted third-party services. Each is listed below with a description of what data they receive and a link to their own privacy documentation.

Google Analytics 4
Operator: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal basis: Consent / Legitimate interest
Purpose: Anonymised usage analytics — page views, session data, geographic region, device type.
Data transmitted: Anonymised IP, browser/device info, pages visited, session metrics.
Google AdSense
Operator: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal basis: Consent
Purpose: Display advertising — contextual and (with consent) personalised ads.
Data transmitted: AdSense cookies, ad-view and click data, approximate location for ad targeting.
Google PageSpeed Insights API
Operator: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Legal basis: Legitimate interest — tool functionality
Purpose: Powers the Website Speed Checker tool — analyses the URL you submit.
Data transmitted: Only the URL you enter. No personal data or file content is transmitted.
Microlink API
Operator: Microlink (microlink.io)
Legal basis: Legitimate interest — tool functionality
Purpose: Powers the Redirect Checker and Canonical Tag Checker tools.
Data transmitted: Only the URL you submit. No personal data or file content is transmitted.

We do not embed social media plugins, comment platforms, chat widgets, or any other third-party service beyond those listed above. If additional integrations are introduced, this policy will be updated before deployment.

07

Data Sharing & Disclosure

We do not sell, rent, trade, or otherwise commercially transfer your personal data to any third party. Data is shared only in the limited circumstances described below.

  • Service providers: Google Analytics and Google AdSense receive anonymised analytics and advertising data as described in Section 6. They act as independent data controllers under their own policies.
  • Legal obligations: We may disclose data where required to do so by law, court order, regulatory authority, or to protect the rights, property, or safety of AllConverter.tools, its users, or the public.
  • Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred to the acquiring entity. We will notify users via a notice on this website before data becomes subject to a different privacy policy.
  • With your consent: We may share data in other ways if you have given specific prior consent for a clearly identified purpose.
08

Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

Data categoryRetention periodRationale
Google Analytics data14 months (GA4 default)Standard analytics data expiry set in GA4 account settings
Google AdSense dataGoverned by GoogleAdSense data retention is managed entirely by Google under their policies
Email enquiries3 years from last contactReasonable limitation period for dispute resolution
Server access logs30 daysShort-term security monitoring only; auto-purged by hosting infrastructure
Browser local storage (API keys)Until you clear browser storageStored only on your device — we have no access or control

We do not retain any file content, document data, calculator inputs, or tool-generated outputs — these exist only in your browser session and are never transmitted to us.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with an individual. You may request early deletion of any personal data we hold about you — see Section 11.

09

Security Practices

We take the security of your data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

Technical measures

  • All connections to AllConverter.tools are encrypted using TLS 1.2 or higher, with TLS 1.3 preferred
  • HTTP Strict Transport Security (HSTS) prevents protocol downgrade attacks
  • Static assets are delivered via a CDN with edge-level DDoS protection
  • All tool processing occurs client-side in your browser — no file data touches our infrastructure
  • We do not operate databases containing personal data beyond what third-party analytics services collect under their own security controls

Organisational measures

  • Access to platform infrastructure is restricted to authorised personnel only
  • Third-party services are selected based on their own security and privacy standards
  • We maintain a responsible disclosure process for security vulnerabilities — see our Security page

No method of data transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable means to protect your data, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in harm to Data Principals, we will notify the Data Protection Board of India and affected individuals as required under the Digital Personal Data Protection Act, 2023, and any rules or directions issued thereunder. For more detail, see our Security page.

10

International Data Transfers

AllConverter.tools is operated from India. Some of our third-party service providers — principally Google LLC (United States) for Analytics and AdSense — process data outside India. Under the Digital Personal Data Protection Act, 2023, cross-border transfers of personal data are permitted to countries notified by the Central Government as providing adequate protection.

Until the Government of India publishes the finalised list of permitted transfer destinations, we rely on the following safeguards for data transferred to Google:

  • Google LLC's contractual data processing terms, which impose obligations on Google consistent with applicable privacy law
  • Google's adherence to the EU–US Data Privacy Framework provides an additional layer of independent certification for data flows to the United States
  • Anonymisation of analytics data before transmission — full IP addresses are never sent to Google

All tool processing occurs locally in your browser — no file content or tool input is transferred internationally or to any server. You can obtain further information about our international transfer safeguards by contacting us at privacy@allconverter.tools.

11

Your Rights

As a Data Principal under the Digital Personal Data Protection Act, 2023, and as a user protected by the Information Technology Act, 2000, you have the following rights with respect to your personal data. We will respond to all valid requests within 30 days of receipt.

RightWhat it meansHow to exercise
Right to access (DPDPA S. 11)Obtain a summary of personal data we hold about you and the purposes for which it is being processed.Email privacy@allconverter.tools
Right to correction (DPDPA S. 12)Request correction or completion of inaccurate, incomplete, or outdated personal data.Email privacy@allconverter.tools
Right to erasure (DPDPA S. 12)Request deletion of personal data that is no longer necessary for the purpose it was collected, subject to legal retention obligations.Email privacy@allconverter.tools
Right to grievance redressal (DPDPA S. 13)Raise a grievance regarding processing of your personal data and receive a response within the prescribed period.Email privacy@allconverter.tools
Right to nominate (DPDPA S. 14)Nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.Email privacy@allconverter.tools
Right to withdraw consentWithdraw consent for analytics or advertising cookies at any time without penalty. Withdrawal does not affect prior lawful processing.Use browser settings or cookie controls
Right to complain to the Data Protection BoardIf your grievance is not resolved, you may file a complaint with the Data Protection Board of India.Via the Board's official portal once operational

Some rights apply only in specific circumstances and are subject to exemptions under the DPDPA and IT Act. Where data is held by third-party processors such as Google, we will direct you to their tools and contact points to exercise your rights with those processors directly.

We will not charge a fee for handling rights requests unless they are repetitive or manifestly unfounded, in which case we may charge a reasonable administrative fee or decline to act, with written reasons provided.

12

Children's Privacy

AllConverter.tools is not directed at children under the age of 13 (or a higher minimum age as required by local law). We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child below the applicable minimum age, we will take prompt steps to delete that data.

If you are a parent or guardian and believe that your child has provided personal data to us, please contact us at privacy@allconverter.tools and we will take appropriate action.

13

Changes to This Policy

We review and update this Privacy Policy periodically to reflect changes in our practices, services, or applicable law. When we make material changes, we will:

  • Update the effective date at the top of this page
  • Display a prominent notice on the homepage for a reasonable period following material changes
  • Where required by law, seek fresh consent for any new processing activities

We encourage you to review this page periodically. Your continued use of AllConverter.tools after changes are posted constitutes acceptance of the updated policy, to the extent permitted by applicable law.

14

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us using the details below. We aim to acknowledge all privacy-related enquiries within 5 business days and resolve them within 30 days.

General privacy enquiriesprivacy@allconverter.tools
Data Protection Officerdpo@allconverter.tools
Legal & compliancelegal@allconverter.tools