Privacy Policy

formatably's converters run entirely inside your web browser. The photos and documents you drop into a converter are processed on your own device and are never uploaded to, logged by, or stored on our servers. We collect only the limited account and billing information needed to operate the optional paid API, described below.

Every converter on formatably runs locally in your browser using JavaScript and WebAssembly. When you convert a file, it stays on your device. We do not receive it, and it does not travel across the network. This is a core design choice, not a setting you have to enable.

The optional paid API is different by nature: files you POST to an API endpoint necessarily pass through our infrastructure to be converted. Direct requests are processed in memory and the result is returned immediately; we do not keep a copy. Files sent through the large-file flow are stored temporarily in object storage so they can be uploaded and downloaded, and are automatically deleted shortly afterwards. We never read, analyze, or share the content of files sent to the API.

We collect personal information only when you choose to use the paid API:

• Account email address. If you subscribe to the API, we store your email so we can send a passwordless sign-in link and associate your API key with your account.
• Billing information. Payments are processed by Stripe. We do not store your card details; Stripe provides us with a customer identifier and subscription status.
• API usage metadata. To enforce rate limits and prevent abuse, we temporarily record request counts associated with an IP address or API key. This does not include the content of your requests.
• Standard server logs. Our hosting provider may log basic technical information (such as IP address, timestamp, and requested URL) for security and reliability.

We use a single first-party cookie to keep you signed in to your account. We do not use advertising or cross-site tracking cookies.

We rely on a small number of trusted providers to run the service:

• Vercel for website hosting.
• Supabase for the account and billing database.
• Stripe for payment processing.
• Resend for sending sign-in emails.
• Cloudflare R2 for temporary storage of files sent through the API's large-file flow.

These providers process data only as needed to deliver their part of the service and under their own privacy commitments.

We keep account and billing records for as long as you maintain an account, and as required to meet legal and accounting obligations. Rate-limit counters are short-lived and reset regularly. You can request deletion of your account at any time.

You may request access to, correction of, or deletion of the personal information associated with your account by contacting us. Because the browser tools do not send us your data, there is nothing on our side to retrieve or delete for that usage.

We may update this policy from time to time. Material changes will be reflected by updating the "last updated" date above.

Questions about privacy? Email us at formatablysupport@gmail.com. See also our Terms of Service.