Privacy Policy

Last updated: 10 September 2026 · Applies to www.covertora.com

The short version: Core file tools process files on your device and do not upload the files to Covertora. If you deliberately use an optional AI feature or choose Save to Library, the text and form fields needed for that action are sent securely to our server. Covertora shows this distinction before those actions.

1. Who we are

Covertora ("we", "us") is operated by DALFAST, s.r.o., Bratislava, Slovak Republic (EU), IČO 52237826, DIČ 2121001949. We are the data controller for the limited personal data described below. You can reach us at privacy@covertora.com.

2. Local file processing and optional online features

Core file actions on Covertora — including merging, splitting, compressing, converting and image editing — happen locally in your web browser using JavaScript and WebAssembly. When you add a file to one of those tools, your browser opens it on your device; Covertora does not receive or retain the file.

We do not receive, store, scan or back up your documents.
File contents used by core local tools do not travel over the network to Covertora.
Closing the browser tab removes the file from the tool's memory.

Optional AI: when you choose an AI-labelled action, the text and form fields required to produce the requested output are sent to our server and to our contracted AI provider. Do not enter passwords, payment-card details, government identifiers or other secrets. If you do not choose the AI action, that data is not sent for AI processing.

Save to Library: when a signed-in user chooses Save to Library, the structured text and form fields in that document are stored in the account library so the user can reopen them. This is optional and separate from local file processing. Saved items can be reviewed and deleted from the account library.

3. The limited data we do process

Running a website still involves some data:

Server logs. Our hosting provider records standard access logs (IP address, browser type, pages requested, timestamp) for security and abuse prevention. Logs are retained for a limited period and not used for profiling.
Security records. We retain limited sign-in and security-event information, including a one-way browser identifier, IP address, event type and timestamp, to prevent abuse and investigate account risks.
Support messages. If you email or WhatsApp us, we process your contact details and message content to help you, and keep the thread for as long as needed to handle your request and reasonable follow-ups.
Local preferences. Your language, currency, free-tier usage counters and Pro status are stored in your browser's localStorage — on your device, not on our servers. See the Cookie Policy.
Optional AI requests. We process the prompt and selected form fields you submit to deliver the requested AI output, operate security controls and prevent abuse. Our AI provider acts as a processor for this request.
Saved library content. If you choose Save to Library, we store the structured document data associated with your account until you delete it or your account is deleted, subject to limited backup and legal-retention requirements.

4. Accounts

You do not need an account to use the free tools. An account is only required to subscribe to Covertora Pro. If you create one, we process:

Your email address — to identify your account, sign you in, send password-reset links, and email you about your subscription.
Your name — optional, only if you provide it.
A salted password hash — we store a one-way hash (never your actual password), so even we cannot read it.
A secure session cookie (__Host-covertora_session in production) — a strictly necessary random identifier that keeps you signed in. It is never used for tracking or advertising.
Optional Google sign-in. If you choose Continue with Google, Google confirms your verified email, name and a stable account identifier. We use those details only to create or access your Covertora account. We do not receive your Google password and do not retain Google access or identity tokens after sign-in.

The legal basis is performance of our contract with you (providing the account and Pro subscription). You can change your password from your account page and can ask us to delete your account and its data at any time by emailing privacy@covertora.com.

5. Payments (Covertora Pro)

Subscriptions are processed by Stripe, a PCI-DSS Level 1 payment provider. When you subscribe, Stripe collects your payment details and billing information directly — we never see or store your card number. Stripe shares with us only what we need to provide the service (e.g. subscription status and the email you used). Stripe's own privacy policy is available at stripe.com/privacy.

6. Cookies & local storage

Covertora does not use advertising or cross-site tracking cookies. We use a strictly necessary, secure session cookie when you are signed in (__Host-covertora_session in production), functional localStorage entries (language, currency and usage counters), and the strictly necessary items our payment provider requires at checkout. Details, including how to clear them, are in the Cookie Policy.

7. Your rights under GDPR

You have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to lodge a complaint with a supervisory authority (in Slovakia: Úrad na ochranu osobných údajov). Because we hold so little data about you, most requests are simple — email us and we'll act on them without undue delay, at the latest within one month.

8. Contact

Privacy questions or requests: privacy@covertora.com. We may update this policy from time to time; the "last updated" date above always reflects the current version.