Privacy Policy
The short version
- Your file is deleted 30 minutes after you upload it. Automatically. Not archived, not backed up, not looked at.
- We do not require an account. We do not ask for your name, email, or phone number to use any tool.
- We do not sell or share your data. Ever. There is no ad network reading your documents.
- We do not read your documents. The processing is automatic. No human at ConvertHub opens your file.
- Everything below is the detail the law requires us to give you. The four points above are the substance.
1. Who we are
ConvertHub ("we", "us") operates the website at playwithfiles.in. Under the Digital Personal Data Protection Act, 2023 ("DPDP Act") we are a Data Fiduciary. You are a Data Principal.
| Operator | Smart Solutions and Services |
|---|---|
| Address | Plot No. 327/2559, OMFED Plant Backside, Chandrasekharpur, Bhubaneswar, Odisha, PIN - 751017 |
| Grievance Officer | Pratyusha chandra subudhi |
| YOUR_REAL_EMAIL | |
| Phone | +917381699551 |
2. What we collect, and why
2.1 The files you upload
This is the only significant data we handle. It is processed solely to perform the conversion you asked for and for no other purpose.
Some of our tools — Mask Aadhaar/PAN and Bank Statement to Excel — necessarily receive documents containing an Aadhaar number, a PAN, or your financial transactions. We process these on our own server, in memory and in a temporary folder, and delete them within 30 minutes.
We never store, log, index, or transmit the contents of those documents anywhere. The Aadhaar number is not extracted to a database; it is read in memory only long enough to draw a black box over it, and then discarded with the file.
If you are not comfortable with this, do not upload the document. That is a reasonable position and we would rather you took it than uploaded something you regret.
2.2 Basic technical data
| IP address | Held in memory for rate-limiting (to stop one person overloading the service for everyone). Not written to a permanent log alongside your file. |
|---|---|
| Browser / device type | To render the page correctly and fix bugs. |
| Pages visited | Aggregate counts only, to know which tools people use. |
2.3 What we do NOT collect
- We do not require your name, email address, phone number, or date of birth.
- We do not run behavioural advertising or sell data to advertisers.
- We do not build a profile of you.
- We do not track you across other websites.
3. Retention — the 30-minute rule
Your uploaded file and the converted output are both permanently deleted 30 minutes after processing. This is enforced by an automatic job on the server, not by a person remembering to do it.
After deletion the file is gone. We cannot recover it for you, and we cannot produce it if someone else asks for it. Download your result before you close the tab.
We do not keep backups of user files. We do not archive them. There is nothing to restore.
4. Legal basis for processing
Under Section 4 of the DPDP Act we process your file on the basis of your consent, given by the clear affirmative act of choosing a file and pressing the convert button. That consent is specific (to the single conversion you requested), informed (by this notice), and limited to what that conversion needs.
You may withdraw consent at any time simply by closing the page before pressing convert, or by asking us to delete a file that has not yet expired (see Section 7). Withdrawal is as easy as giving consent was.
5. Who else sees your data
In the ordinary case: nobody. Conversion happens on our own server using open-source software (LibreOffice, Tesseract, qpdf). Nothing is sent to any third party.
There is exactly one exception, and it is optional:
Our table reader works for free on our own server. If, and only if, the free reader struggles and you actively click "Let AI read it instead", the cropped image of that table is sent to Anthropic PBC (United States) to be read by their vision model.
This never happens automatically. You have to choose it. If you never click that button, no data of yours ever leaves our server.
This is a cross-border transfer of personal data. By clicking that button you consent to it. Anthropic's privacy terms: anthropic.com/legal/privacy
We may also disclose data if a court or a competent Indian authority lawfully compels us to. Given the 30-minute deletion rule, in practice there is usually nothing left to disclose.
6. Security
Section 8(5) of the DPDP Act requires us to take reasonable security safeguards. We:
- Serve the entire site over HTTPS (encrypted in transit).
- Give each uploaded file a random, unguessable name, so nobody can find your file by guessing a URL.
- Run conversion in an isolated process with no network access to your file.
- Enforce the 30-minute deletion automatically.
- Keep no database of file contents. There is no table of Aadhaar numbers to leak, because we never build one.
We will not pretend to be invulnerable. No internet service is. If a personal data breach occurs, we will notify you and the Data Protection Board of India without delay, and file a detailed report with the Board within 72 hours, as Rule 7 of the DPDP Rules requires.
7. Your rights
Chapter III of the DPDP Act gives you these rights. To use any of them, email our Grievance Officer at YOUR_REAL_EMAIL.
| Right to access Section 11 | Ask for a summary of what personal data we hold about you and what we are doing with it. |
|---|---|
| Right to correction and erasure Section 12 | Ask us to correct, complete, update or delete your personal data. If a file of yours is still inside its 30-minute window and you want it gone now, tell us and we will delete it immediately. |
| Right to grievance redressal Section 13 | Complain to our Grievance Officer. We will acknowledge within 72 hours and resolve within 90 days at the outside — in practice, far sooner. |
| Right to nominate Section 14 | Nominate someone to exercise your rights if you die or become incapacitated. |
| Right to withdraw consent | Withdraw at any time. Withdrawal does not make the processing that already happened unlawful. |
If you are not satisfied with how we handle your grievance, you may escalate to the Data Protection Board of India. You must come to us first — the law requires you to exhaust our mechanism before approaching the Board.
8. Your duties
Section 15 of the DPDP Act places duties on you as well. In plain terms: do not impersonate anyone, do not upload someone else's identity document without their permission, and do not file false or frivolous complaints. There are penalties (up to ₹10,000) for breaching these duties.
9. Children
This service is not directed at children under 18. We do not knowingly process a child's personal data. We do not track, behaviourally monitor, or serve targeted advertising to children — Section 9(3) of the DPDP Act prohibits it, and we would not do it anyway.
If you are under 18, please use this site only with a parent or guardian's involvement.
10. Cookies
We use only what is strictly necessary to make the site work. We do not use advertising cookies or cross-site trackers.
We currently use no third-party analytics at all.
11. Changes to this policy
If we change this policy materially, we will update the date at the top and post a notice on the homepage. Continuing to use the site after that means you accept the change.
12. Contact and grievances
Grievance Officer (appointed under Section 8(9) and Section 13 of the DPDP Act)
Pratyusha chandra subudhi
Smart Solutions and Services
Plot No. 327/2559, OMFED Plant Backside, Chandrasekharpur, Bhubaneswar, Odisha, PIN - 751017
Email: YOUR_REAL_EMAIL
Phone: +917381699551
We acknowledge every grievance within 72 hours with a tracking reference, and resolve within 90 days at the outside.