Privacy Policy
Last modified: January 3, 2026
Data Controller
Roman Soubiran
Operating as DataFormatHub
22 rue de la Landelle
22120 Quessoy, France
Data Protection Contact: contact@dataformathub.com
1. Introduction
This Privacy Policy explains how DataFormatHub ("we", "us", "our") collects, uses, and protects your information when you use our website and services (the "Service").
Our Privacy-First Approach: DataFormatHub is built with privacy as a core principle. All standard data conversions happen directly in your browser — your files and data are never uploaded to our servers. We collect minimal data necessary to operate and improve the Service.
By using the Service, you agree to the collection and use of information as described in this policy. For users in the European Economic Area (EEA), we process personal data in accordance with the General Data Protection Regulation (GDPR). For California residents, we comply with the California Consumer Privacy Act (CCPA).
2. Information We Collect
2.1 Information You Provide
Newsletter Subscription: If you subscribe to our newsletter, we collect your email address through Resend, our email service provider.
Contact Form: When you contact us, we collect the information you provide, such as your name, email, and message content.
AI Tool API Keys: If you use AI-powered tools, you may input your own API keys. These keys are stored only in your browser's local storage and are never transmitted to our servers.
2.2 Information Collected Automatically
Analytics Data: We use Google Analytics and Vercel Analytics to collect anonymized usage data, including page views, tool usage, browser type, device information, and approximate geographic location.
Log Data: Our servers may automatically collect standard log information, including IP addresses (anonymized), request timestamps, and error logs for debugging purposes.
Cookies: We use essential cookies for site functionality and analytics cookies for usage statistics. See Section 5 for details.
2.3 Information We Do NOT Collect
Conversion Data: All standard file conversions and data transformations are performed entirely in your browser. The data you convert never leaves your device.
API Keys: API keys you use with AI tools are stored locally in your browser and never sent to our servers.
Personal Files: We do not have access to any files you process using our conversion tools.
3. How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery: To provide, maintain, and improve the Service.
Communication: To send newsletters (if subscribed) and respond to inquiries.
Analytics: To understand how users interact with our tools and identify areas for improvement.
Security: To detect, prevent, and address technical issues and security threats.
Legal Compliance: To comply with applicable laws and legal obligations.
4. Third-Party Services
We use the following third-party services that may collect or process data:
Google Analytics: For website analytics. Data is anonymized. Privacy Policy: https://policies.google.com/privacy
Vercel Analytics: For performance monitoring. Privacy Policy: https://vercel.com/legal/privacy-policy
Resend: For newsletter delivery. Your email is stored securely. Privacy Policy: https://resend.com/legal/privacy-policy
Google AdSense: To serve advertisements. Google uses cookies to serve ads based on your prior visits to our website or other websites. You can opt out of personalized advertising by visiting Google Ads Settings (https://www.google.com/settings/ads).
AI Providers (User-Initiated): When you use AI tools with your own API keys, data is sent directly to the AI provider (Google Gemini, OpenAI, etc.) according to their privacy policies. We do not intermediate or store this data.
We only share data with third parties as described in this policy. We never sell your personal information.
5. Cookies and Tracking Technologies
We use the following types of cookies:
Essential Cookies: Required for basic site functionality, such as remembering your preferences (theme, language). These cannot be disabled.
Analytics Cookies: Used by Google Analytics and Vercel Analytics to collect anonymized usage data. You can opt-out through your browser settings or tools like Google Analytics Opt-out Browser Add-on.
Advertising Cookies: Third-party vendors, including Google, use cookies to serve ads based on your prior visits. These cookies enable Google and its partners to serve ads based on your visit to our sites and/or other sites on the Internet.
You can control and manage cookies in your browser settings. Blocking essential cookies may impact site functionality.
6. Data Security
We implement appropriate technical and organizational measures to protect your information:
Encryption: All data transmitted to and from our website is encrypted using HTTPS/TLS.
Client-Side Processing: Conversion tools process data locally, minimizing data exposure.
Access Controls: Access to backend systems is restricted and monitored.
Regular Updates: We regularly update our systems and dependencies to address security vulnerabilities.
While we strive to protect your data, no method of transmission over the Internet is 100% secure. You use the Service at your own risk.
7. Data Retention
We retain data only as long as necessary:
Newsletter Subscriptions: Your email is retained until you unsubscribe. You can unsubscribe at any time via the link in any newsletter.
Analytics Data: Anonymized analytics data is retained according to Google Analytics and Vercel Analytics retention policies (typically 14-26 months).
Contact Inquiries: Contact form submissions are retained for up to 2 years for reference and legal purposes.
Conversion Data: Not applicable — we do not store any data you convert. It exists only in your browser session.
8. Your Rights Under GDPR (EEA Users)
If you are located in the European Economic Area, you have the following rights under the GDPR:
Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate personal data.
Right to Erasure: Request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing: Request limitation of how we use your data.
Right to Data Portability: Receive your data in a structured, commonly used format.
Right to Object: Object to processing based on legitimate interests.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
Legal Basis for Processing: We process your data based on: (a) your consent (newsletter subscription), (b) performance of a contract (service delivery), (c) legitimate interests (analytics, security), and (d) legal obligations.
To exercise these rights, contact us at contact@dataformathub.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (in France: CNIL - Commission Nationale de l'Informatique et des Libertés).
9. Your Rights Under CCPA (California Residents)
If you are a California resident, you have the following rights under the CCPA:
Right to Know: Request disclosure of personal information collected, used, and shared.
Right to Delete: Request deletion of personal information.
Right to Opt-Out: Opt-out of the sale of personal information. Note: We do NOT sell personal information.
Right to Non-Discrimination: Receive equal service regardless of exercising privacy rights.
To exercise these rights, contact us at contact@dataformathub.com. We do not sell personal information and have not done so in the past 12 months.
10. International Data Transfers
Our servers and some third-party services may be located outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Data Processing Agreements with all third-party processors
Since conversion data never leaves your device, there are no international transfers of your processed files or conversion data.
11. Children's Privacy
Our Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@dataformathub.com, and we will take steps to delete such information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last modified" date. For material changes, we will provide additional notice through the Service or via email to newsletter subscribers. Your continued use of the Service after changes constitutes acceptance of the revised policy.
13. Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about our data practices, please contact us:
For GDPR-related inquiries, you may also contact the French data protection authority: CNIL (Commission Nationale de l'Informatique et des Libertés)