This Privacy Policy explains how the ConvertFlow - All-In-One File Converter Chrome extension (“ConvertFlow”, “we”, “us”) handles information. We have written it to describe exactly what the extension does, with no gaps between our practices and this document.
The short version: Your files are converted entirely on your own device and are never uploaded to us. We do not sell your data, we do not run ads, and we do not use analytics or tracking of any kind. The only personal information we hold is the email address you sign in with, a count of how many conversions you have run, and your subscription record.
Every conversion - video, audio, image, document and spreadsheet - is performed locally inside your browser using WebAssembly and standard browser APIs. The conversion engine is bundled inside the extension itself.
We collect only the limited information needed to operate accounts, enforce plan limits, and process payments:
| Data | Why we need it |
|---|---|
| Email address (from your Chrome profile) |
To identify your account, link your subscription to you, and send billing-related email. We read only the address of the Google account already signed in to your browser - we never ask for or receive your Google password, and we request no access to your Google account. |
| Conversion counts | A running total of how many conversions you have performed, so we can enforce free and paid plan limits. We record that a conversion happened - never what was converted. |
| Subscription records | Your plan type, status, start and expiry dates, amount paid, and the Stripe customer/subscription identifiers needed to manage renewals, cancellations and refunds. |
| IP address & basic server logs | Recorded when your extension or the pricing page contacts our API, for security, fraud prevention, abuse protection and diagnostics. |
| Permission | Purpose |
|---|---|
storage | Saves your signed-in email, plan status and conversion count locally in your browser so the extension works between sessions. |
identity, identity.email | Reads the email address of the Google account already signed in to your Chrome profile, so your subscription can be linked to your account. This grants no access to your Google account itself. |
alarms | Schedules a periodic background check of your subscription status so your plan stays up to date. |
Host access toconvertflow.proofmatcher.com | Our own API. Used solely to verify your plan, read and update your conversion count, and open the pricing page. |
The extension does not request access to your tabs, browsing history, or the content of websites you visit, and it does not inject scripts into web pages.
Our own API is the only server the extension ever contacts. It loads no remote code, and downloads no fonts, scripts or trackers from third parties - the conversion engine and every asset ship inside the extension itself.
ConvertFlow does not run a Google OAuth consent flow and does not connect to any Google API. When you sign in, the
extension simply reads the email address of the Google account that is already signed in to your Chrome
browser profile, using Chrome’s built-in identity.email permission.
This means we never see your Google password, never receive an access token, and hold no permission to read your Gmail, Drive, contacts or any other Google service. The email address is used purely as the identifier that links you to your subscription.
If you are not signed in to Chrome, no email is available and you can simply use the extension without an account until you sign in to the browser. Click Sign out in the extension at any time to remove the stored address from your device.
We do not sell, rent or trade your personal information to anyone, and we do not share it with third parties for their own marketing purposes.
Account, usage and subscription records are stored on our own server, reachable only over encrypted HTTPS. Administrative access is restricted and authenticated. Payment records are held by Stripe on PCI-DSS-compliant infrastructure. Data stored inside your browser by the extension stays on your device and is removed when you sign out or uninstall the extension.
No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable technical and organisational measures appropriate to the limited data we hold.
Depending on where you live (including under the GDPR in the EU/UK and the CCPA in California), you may have the right to access, correct, export, restrict or delete the personal information we hold about you, and to object to certain processing. We honour these requests regardless of your location.
We do not discriminate against you for exercising any of these rights.
ConvertFlow is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect their personal information. If you believe a child has provided us with data, contact us and we will delete it.
Our servers and service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards for such transfers. By using ConvertFlow you understand your information may be processed in these locations.
If we make material changes to this policy, we will update the “Last updated” date above and, where appropriate, notify you by email or within the extension. Continued use after an update constitutes acceptance of the revised policy.
Questions, requests or privacy concerns: [email protected]. We aim to respond within a few business days.