Log in Sign up free

Privacy Policy

Last updated: March 23, 2026

1. Introduction

ConvertBag ("we", "us", "our") is operated by KodSanat. This policy explains what information we collect, how we use it, and how long we keep it. By using ConvertBag, you agree to the practices described here.

We operate the service at https://convertbag.com. The service processes video files on demand and does not sell or share your personal data with third parties for advertising.

2. Information We Collect

We collect only what is necessary to operate the service:

  • Account data: Email address and hashed password when you register. If you sign in with Google, we receive your Google account email, name, and profile picture.
  • Subscription data: Plan type and subscription status, stored in our database. Payment details are handled entirely by Paddle — we never see or store your card number.
  • Usage data: IP address, input and output file formats, file sizes, conversion timestamps, and job status. This is used to enforce usage limits and monitor abuse.
  • Session data: A session cookie is set when you visit the site to maintain your login state. No persistent tracking cookies are used.
  • Server logs: Standard web server logs (IP address, browser type, pages visited) are retained briefly for security and diagnostic purposes.

3. File and Conversion Processing

Files you upload are stored temporarily on our server only for the duration of the conversion. Once conversion is complete, the original upload is deleted immediately. The converted output file is available for download for a short window (currently 2 minutes), after which it is automatically deleted.

We do not read, analyse, or retain the content of your files. Files are processed using FFmpeg on our server and are not shared with any third party.

4. Google Sign-In

If you choose to sign in with Google, we receive the following from Google:

  • Your Google account email address (verified)
  • Your display name (not stored by default)
  • Your Google profile picture URL
  • A unique Google account identifier

We use this only to create or identify your ConvertBag account. We do not request access to your Google Drive, Gmail, contacts, or any other Google service. You can revoke ConvertBag's Google access at any time via Google account permissions.

5. Payment Processing

Payments are processed by Paddle, a third-party payment provider. When you subscribe to a paid plan, you are redirected to Paddle's secure checkout. Paddle collects and handles all payment information (card details, billing address, etc.). We receive only your subscription status and a Paddle customer reference.

Paddle's privacy practices are governed by the Paddle Privacy Policy.

6. Cookies and Sessions

We use a single session cookie to keep you logged in during your visit. This cookie is essential to the service and does not track you across other websites. We do not use advertising cookies, analytics pixels, or third-party tracking scripts.

7. How We Use Your Data

We use the information we collect to:

  • Operate and deliver the conversion service
  • Manage your account and subscription
  • Enforce usage limits and prevent abuse
  • Send transactional emails (email verification, password reset, billing receipts)
  • Investigate security incidents and diagnose technical problems

We do not use your data for advertising, profiling, or sale to third parties.

8. Data Retention

  • Uploaded files: Deleted immediately after conversion.
  • Converted output files: Deleted 2 minutes after conversion completes.
  • Account data: Retained for as long as your account exists. Deleted upon account closure, subject to any legal retention obligations.
  • Conversion logs: Basic metadata (format, size, timestamp, IP) may be retained for up to 90 days for abuse prevention, then deleted.
  • Server logs: Typically retained for 30 days.

9. Third-Party Services

We use the following third-party services in the operation of ConvertBag:

  • Paddle — payment processing and subscription management
  • Google OAuth — optional sign-in method (only if you choose to use it)
  • Hostinger — web hosting and server infrastructure

Each of these providers has its own privacy policy governing how they handle data shared with them in the course of providing their services.

10. Your Rights and Choices

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Withdraw consent for optional data uses
  • Lodge a complaint with a relevant data protection authority

To exercise any of these rights, contact us at support@convertbag.com. We will respond within a reasonable timeframe.

11. Security

We use industry-standard security measures including encrypted HTTPS connections, hashed passwords (bcrypt), and session protections. While we take security seriously, no system is completely immune to risk. Please use a strong, unique password for your account.

12. Children

ConvertBag is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. For material changes, we will notify registered users by email.

14. Contact Us

For any privacy-related questions or requests, please contact us at:
support@convertbag.com