Privacy Policy

Who we are

ConvertKit is built and run by a small, independent startup based in Pakistan. We are a small team — there is no large company behind this site. When you contact us, you reach the same people who build and maintain the tools. This policy explains, in plain language, what we collect, what we never see, and how to reach us.

The short version

Your files are processed inside your own browser. They are never uploaded to our servers, because we do not operate file-processing servers at all. We collect only: messages you choose to send us, your theme preference, and — only if you consent — aggregate analytics and advertising data.

Your files stay on your device

Every image, PDF, and document conversion runs locally using your browser’s memory and JavaScript. Your file is read from your device, transformed in place, and written back to your device. No copy of your file is transmitted over the network, stored on a server, or shared with anyone. This holds for all of our tools — image studio, PDF workspace, and document converter.

What we do collect

• Contact form messages. If you write to us, we receive your name, email address, subject, and message so we can reply. These emails are delivered through Resend, a third-party email provider, to our team inbox. We keep messages only as long as needed to respond and handle follow-ups; you can ask us to delete them at any time.
• Theme preference. Your light/dark choice is saved in your browser’s localStorage on your own device. It is never sent anywhere.
• Consented analytics. If you accept cookies, Google Analytics 4 records aggregate page views (pages visited, referrer, coarse region, device type). No file contents are ever part of this.
• Consented advertising data. If you accept cookies, Google AdSense may use cookies to select and measure ads. See the advertising section below.
• Basic security signals. The contact form is protected by Cloudflare Turnstile (bot check) and rate limiting, which process your IP address for abuse prevention only.

No AI processing of your content

We do not send your files, messages, or any personal data to AI or machine learning services. The tools do not use AI to read, analyze, or train on your content.

Cookies

Strictly necessary storage (theme, consent choice) is always on. Analytics and advertising cookies are off until you consent. The full breakdown lives in our Cookie Policy.

Google AdSense and advertising cookies

This site uses Google AdSense to display advertisements. Google, as a third-party vendor, uses cookies — including the DoubleClick DART cookie — to serve ads based on your prior visits to this and other websites.

You may opt out of personalized advertising by visiting Google Ads Settings. You may also opt out of a third-party vendor’s use of cookies for personalized advertising at aboutads.info or optout.networkadvertising.org.

For more information on how Google uses cookies in advertising, see Google’s page on how Google uses cookies.

Your consent choices

We use Google’s certified consent management platform (Funding Choices) to collect your consent for advertising and analytics cookies and to honor regional privacy rights (GDPR for the EEA, UK and Switzerland, and US state privacy laws). You can accept, reject, or manage choices per purpose, and change your mind at any time via the Privacy and cookie settings. Until you grant consent, advertising and analytics storage stays disabled (Google Consent Mode defaults to “denied”). Rejecting is as easy as accepting — the tools work identically either way.

Who we share data with

• Google — Analytics and AdSense, but only with your consent; Google acts as a processor under its own terms.
• Resend — delivers contact-form emails to our inbox; it sees the message content you type, nothing else.
• Cloudflare — hosts the site and runs the contact form bot check (Turnstile).

We do not sell, rent, or trade personal data. We have no other third-party trackers, pixels, or session-replay tools.

Retention and your rights

Contact messages are kept only while your request is open. Analytics data is retained per Google’s settings. You may request a copy of your personal data, correction, or deletion (including any contact-form messages) by using our contact form. We respond to verified requests as quickly as we can, and at the latest within the window your local law requires (for example 30 days under GDPR). You may also lodge a complaint with your local data protection authority.

Children’s privacy

ConvertKit is a general-audience productivity site and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information through the contact form, contact us and we will delete it promptly.

Security

The site is served over HTTPS with strict security headers, and your files never reach us in the first place — the biggest privacy risk (a server breach exposing your documents) does not exist here. Message data we do hold sits in a protected team inbox behind two-factor authentication.

Changes to this policy

When we change what we collect or why, we update this page and the date at the top. Material changes will be highlighted here for a reasonable period.

Contact

Questions, requests, or concerns about privacy? Please reach out via our contact page — a real person on the team reads every message.