Privacy Policy

Free tools convert your files locally — the files never leave your device and we never see them. Pro server tools process files in an ephemeral sandbox and delete them immediately after conversion. We store the minimum needed to run accounts and billing, and we do not run third-party advertising trackers.

The data controller is Favour Moses, trading as Deskwright (a sole trader), United Kingdom. Contact: support@deskwright.com.

Account data — your email address and a salted password hash (or, if enabled, your Google sign-in identity). We never store plain passwords.

Session security — when you sign in, the active-session record includes your IP address and device/browser information (user-agent) to help protect your account. These are kept while the session is active and deleted when the session ends or your account is deleted.

Billing data — handled by Lemon Squeezy, our Merchant of Record (the seller of record for your purchase, who also handles VAT and sales tax). We store your Lemon Squeezy customer and subscription identifiers, plan, and status. We never see or store card numbers.

Usage events — for metering and abuse prevention we record which tool ran, byte counts, and timing. We do not record file contents or file names.

Brand kit — if you save a logo, we store that image until you delete it from your account.

Cookies — a session cookie for sign-in. No third-party advertising cookies.

Files converted with free (local) tools are never uploaded, logged, or seen by us. Files sent to Pro server tools are not stored: they are processed and deleted immediately, and their contents are never logged.

Vercel (hosting and logo storage), Neon (database), Lemon Squeezy (payments, as Merchant of Record), and Railway (Pro conversion processing). Each processes data only to provide their service to us.

Account and billing records are kept while your account exists and as required for tax and accounting. You can delete your saved brand kit in-app at any time. To delete your account and associated data, contact support@deskwright.com — we honour verified deletion requests within 30 days, subject to legal retention obligations.

Under the UK GDPR and the Data Protection Act 2018, you may request access to, correction of, or deletion of your personal data, and you may complain to the Information Commissioner’s Office (ICO). Contact support@deskwright.com to exercise these rights.

We may update this policy; material changes will be notified on the site or by email.