Privacy Policy

The short version

You upload a file. We convert it. You download the result. The original and the converted file are both deleted within 60 minutes — enforced at the storage infrastructure level, not by a scheduled job we might forget to run. We do not read your files, analyse their content, or share them with anyone. No account is required.

File handling

Files you upload are stored temporarily in Supabase Storage while conversion is in progress. The storage infrastructure applies a 60-minute TTL (time-to-live) to every file. This means the storage service itself deletes the file at 60 minutes, independent of any application-level action.

A secondary cleanup job runs every five minutes and removes any files that have passed their expiry, as a belt-and-suspenders check on the infrastructure deletion. When you download your converted file and confirm receipt, the file is deleted immediately — before the 60-minute window expires.

Every deletion is logged in an append-only audit table. What is logged: the timestamp, a file identifier (not the filename), file type, page count bracket, and the reason for deletion. What is never logged: the file content, the original filename, your IP address, or any information that identifies the specific document.

Data we collect

Without an account: We store a temporary session token in your browser to track your daily free conversion count. This token expires within 24 hours. We do not collect or store your IP address beyond what is transiently used by the rate-limiting system (Upstash Redis counters with a one-hour TTL). We do not collect your email address, name, or any personal identifier.

With an account (optional): If you create an account to access Pro or Teams features, we store your email address and authentication credentials via Supabase Auth. We store your conversion history (file type, output type, timestamp — not the file content). We store your payment information via Stripe; we do not handle or store card numbers directly.

Analytics: We use Vercel Analytics to measure page performance and traffic patterns. Vercel Analytics is privacy-preserving: it does not use cookies, does not collect personal data, and does not track users across sessions or sites. The data is aggregate and anonymous.

Cookies

We use two first-party cookies: a session token cookie (HttpOnly, Secure, SameSite=Strict) that manages your guest session and rate limit tracking, and a cookie consent preference cookie. Both are functional and cannot be rejected without breaking core functionality.

If you accept advertising cookies, we load Google AdSense scripts to display advertisements on free-tier pages. Google AdSense uses cookies to serve relevant ads.See Google's advertising privacy policy for details on what data AdSense collects. Ifyou reject advertising cookies, no ad scripts are loaded.

Advertising disclosure (Google AdSense)

Filum uses Google AdSense to display advertisements on free-tier pages. AdSense uses cookies and device identifiers to serve personalised ads based on your browsing history. This personalisation is controlled by your cookie consent choice on this site and by your Google account settings.

We do not display ads on the pricing page, the developer portal, or the status page. Ads appear only on conversion tool pages and informational pages, and only when you have accepted advertising cookies.

Pro and Teams subscribers see no advertisements. Upgrading to Pro removes all advertising from your account immediately.

Third-party services

File conversion uses Gotenberg and LibreOffice running on Railway infrastructure in the same geographic region as our primary Supabase instance. Files are transmitted to this service over HTTPS for conversion and are not retained by the conversion service after the conversion completes.

Payment processing uses Stripe. Filum does not store payment card numbers. Stripe's privacy policy governs how Stripe handles payment data.

Error tracking uses Sentry. Sentry captures application errors with a Sentry trace ID associated with each request. Sentry logs do not include file content or file names.

Your rights

If you have an account, you can request a copy of your data, delete your account, or request that we remove your conversion history at any time by emailing hello@filum.se. We will respond within 72 hours.

If you are in the European Economic Area or the United Kingdom, you have rights under GDPR including the right to access, rectification, erasure, restriction, portability, and objection. To exercise these rights, contact us at the email above.

Changes to this policy

When we make material changes to this policy, we will update the date at the top of this page. We will not retroactively reduce your privacy protections without notice.

Contact

Questions about this policy: email hello@filum.se. We read every message and respond to every substantive question.