Privacy Policy

1. Introduction

Welcome to CreatorFormat ("we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at creatorformat.com (the "Service").

Important Privacy Note: Most of our free tools (including PDF converters, document converters, and file transformation tools) process files entirely in your browser using client-side JavaScript. This means your files never leave your device and are never uploaded to our servers. We cannot see, access, or store files processed through these browser-based tools.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Browser-Based Tools (No Data Collection)

For our free browser-based conversion tools (PDF to Word, Word to PDF, PDF to JPG, EPUB converters, etc.):

• No file uploads: Files are processed entirely in your browser using JavaScript
• No server storage: Your files never leave your device
• No registration required: You can use these tools anonymously
• No tracking: We do not track which files you convert or process

2.2 Personal Information (Optional Account Users)

If you choose to create an account for advanced features, we collect:

• Full name
• Email address
• Password (encrypted and securely stored)
• Account preferences and settings

2.3 Account-Based Features

For users with accounts who use server-based features (cloud storage, advanced formatting):

• Files you choose to save to your account
• Document metadata (titles, preferences)
• Usage statistics (storage used, features accessed)

2.4 Payment Information (Premium Features)

If you subscribe to premium features (most tools remain free):

• Payment information is processed securely through Paddle (our payment processor)
• We do not store your complete credit card information
• We retain transaction records, subscription status, and billing history

2.5 Automatically Collected Information

We automatically collect certain information when you use our Service:

• IP address and device information
• Browser type and version
• Operating system
• Pages visited and features used
• Time and date of access
• Referring website addresses

2.6 Cookies and Tracking Technologies

We use minimal cookies only for essential functionality (session management for logged-in users). We do not use tracking cookies for analytics or advertising on our free tools. See our Cookie Policy for detailed information.

3. How We Use Your Information

For browser-based tools: We do not collect or use any file data. For users with accounts, we use collected information for:

• Service Provision: To provide, maintain, and improve our free tools and services
• Account Management: To create and manage optional accounts, authenticate users, and provide customer support
• File Storage: To store files you choose to save (for account users only)
• Communication: To send service-related notifications and important updates (no marketing emails for free tool users)
• Payment Processing: To process premium subscriptions and manage billing (optional)
• Service Improvement: To understand how tools are used and improve functionality
• Security: To detect, prevent, and address technical issues and security threats
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service

4. Data Storage and Security

4.1 Browser-Based Processing

For our free conversion tools:

• No server uploads: Files are processed entirely in your browser
• No storage: Converted files remain on your device only
• Complete privacy: We cannot access files processed through browser-based tools

4.2 Storage Location (Account Users)

For users with accounts, data is stored on secure cloud infrastructure:

• Account data: MongoDB Atlas (encrypted database)
• Files you choose to save: Cloudflare R2 storage with encryption at rest
• Session data: Secure Redis cache with encryption

4.3 Security Measures

We implement industry-standard security measures to protect your data:

• TLS/SSL encryption for all data transmission
• Password hashing using bcrypt
• Regular security audits and vulnerability assessments
• Rate limiting to prevent abuse
• Access controls and authentication mechanisms
• Regular backups and disaster recovery procedures

4.4 Data Retention

We retain information only as long as necessary:

• Browser tools: No data retention (files never reach our servers)
• Account data: Retained while your account is active
• Saved files: Retained according to your storage plan (for account users only)
• Transaction records: Retained for 7 years for tax and legal compliance
• After account deletion: Personal data is deleted within 30 days, except where legal retention is required

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

5.1 Service Providers

We work with trusted third-party service providers:

• Paddle: Payment processing and subscription management
• MongoDB Atlas: Database hosting
• Cloudflare R2: File storage
• Resend: Transactional email delivery
• Google OAuth: Optional authentication (if you choose to sign in with Google)

5.2 Legal Requirements

We may disclose your information if required by law or in good faith belief that such action is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of CreatorFormat, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or a prominent notice on our Service of any change in ownership or use of your personal information.

6. Your Rights and Choices

You have the following rights regarding your personal information:

6.1 Access and Portability

• Request a copy of your personal data in a structured, machine-readable format
• Access your account information through your dashboard

6.2 Correction and Update

• Update your account information at any time through your settings
• Contact us to correct inaccurate or incomplete data

6.3 Deletion

• Request deletion of your account and personal data
• Delete individual manuscript files from your dashboard

6.4 Marketing Communications

• Opt-out of marketing emails by clicking "unsubscribe" in any marketing email
• Manage email preferences in your account settings
• Note: You cannot opt-out of service-related communications (e.g., account verification, security alerts)

6.5 Cookie Control

You can control cookies through your browser settings. See our Cookie Policy for more information.

To exercise any of these rights, please contact us through our website.

7. International Data Transfers

CreatorFormat operates globally. Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your country.

We ensure appropriate safeguards are in place to protect your information when it is transferred internationally, including using secure cloud infrastructure with encryption and compliance certifications.

8. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us through our website.

If we discover that we have collected personal information from a child under 13, we will delete that information immediately.

9. Third-Party Links

Our Service may contain links to third-party websites, services, or applications that are not operated by us. We are not responsible for the privacy practices of these third parties.

We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us through our website.

11. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

Our legal basis for processing your personal data includes:

• Contract: Processing necessary to perform our Service
• Consent: Where you have given explicit consent
• Legitimate Interests: To improve our Service and ensure security
• Legal Obligation: To comply with applicable laws

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by law. We will take immediate steps to mitigate the breach and protect your data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will update the "Last Updated" date at the top of this page
• For material changes, we will notify you via email or a prominent notice on our Service
• Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through our website.

We will respond to your inquiry within 30 days.