How JPGtoSVG handles data.

JPGtoSVG operates JPGtoSVG and is responsible for the personal data described in this policy. This policy explains what we collect, why we use it, who processes it, how long it is retained, and the choices available to you.

1. Image contents

We receive image contents and conversion settings to perform the conversion you request. Image contents are processed temporarily and discarded after the request completes; they are not added to a permanent image library or used to train models. Generated SVG content is returned to your browser and is not intentionally retained as a stored file by JPGtoSVG.

2. Account data

Google sign-in, through Supabase authentication, provides an account identifier, email address, name, avatar, provider information, and authentication session data. We use these details to authenticate you, secure the Service, associate billing, enforce plans, and respond to account requests.

3. Usage and technical data

Conversion records may include account email, file name, file size, image dimensions, selected mode and color count, success status, timestamps, and plan. Infrastructure providers also produce logs such as IP address, browser or device information, request time, response code, and error details. Image contents are not intentionally written to application logs.

4. Billing data

Creem or Stripe may collect billing name, address, country, tax identifiers, payment method data, and fraud-prevention signals at checkout. We receive limited records such as customer and subscription identifiers, email, selected plan, payment and subscription status, billing period, cancellation status, and webhook event identifiers. We do not receive or store full card numbers.

5. Cookies and browser storage

We use first-party cookies and local storage for authentication, OAuth completion, security, and converter preferences. We do not currently load third-party advertising or analytics cookies, and we do not sell data for targeted advertising. If optional analytics are introduced, this policy and any consent controls required by local law will be updated first.

6. Purposes and legal bases

• Perform the requested conversion and paid subscription contract.
• Authenticate accounts, enforce limits, prevent abuse, and secure the Service.
• Maintain billing, tax, accounting, support, and dispute records.
• Diagnose faults and improve reliability based on legitimate operational interests.
• Use consent where local law requires it, including for optional analytics.
• Comply with legal obligations and valid governmental requests.

7. Service providers and disclosures

Relevant processors may include Google for sign-in; Supabase for authentication and database services; Creem as merchant of record and billing provider; Stripe for payment and billing services; hosting, conversion-compute, email, security, and analytics providers used to operate the Service. They receive data only for their assigned function. We may also disclose data when legally required, to protect users and the Service, or as part of a business transfer subject to appropriate safeguards.

8. International processing

Providers may process data in countries other than your own. Where required, we rely on recognized transfer mechanisms or contractual and organizational safeguards. Provider privacy notices describe their locations and transfer practices in more detail.

9. Retention

Image contents are discarded after conversion processing. Account and usage records are generally kept while the account remains active and for a reasonable period needed for security, support, and dispute handling. Billing, tax, fraud, and transaction records may be retained for the period required by applicable law and payment providers. Webhook event identifiers are retained to prevent duplicate billing actions. Backup copies and infrastructure logs expire according to operational retention schedules.

10. Your choices and rights

Depending on your location, you may request access, correction, deletion, portability, restriction, or objection; withdraw consent where processing depends on consent; and complain to a data-protection authority. Contact us using your account email. We may need to verify identity, and some records may be retained where law or legitimate security and billing needs require it.

11. Security

We use HTTPS, access controls, signed payment webhooks, provider-hosted card entry, and other reasonable safeguards. No Internet service can guarantee absolute security.

12. Children

The Service is not directed to people under 18, and we do not knowingly collect their personal data. Contact us if you believe a minor has provided data.

13. Changes and contact

Material changes will be reflected by a revised date and reasonable notice where required. Privacy requests can be sent to support@jpgtosvg.net. Operator: JPGtoSVG.