Privacy policy
This page describes the data required by the ConvertChester converter, API and accounts, including the strictly bounded exception used to investigate an incident.
Last updated: 23 August 2026
This translation is provided for convenience. In case of a discrepancy, the French version prevails.
Controller and contact
The service is operated by Arcchester SARL. To ask a question about your data or exercise a right, email contact@convertchester.com.
A submitted file may contain personal data. You remain responsible for having a valid reason to send it to the service.
Ordinary file conversion
During ordinary operation, the file is received by the API, processed in memory, returned to the requester and then forgotten. It is not added to a history or backed up.
Ordinary logs contain only minimal technical data: SHA-256 fingerprint, size, detected format, requested target, outcome and duration. They contain neither the file content nor its name.
Exceptional incident inspection
An authorised administrator may temporarily enable inspection to understand an abnormal submission or a security incident. Depending on the selected setting, it may record the network address, user agent, filename or a copy of the content.
Activation is time-bound, limited to the issue being investigated and visible in administration. Captures are isolated, are not backed up and are deleted within 30 days at the latest. This is not the service’s ordinary mode of operation.
Accounts and communications
If you create an account, we process your email address, verification state, sessions, API keys, usage count and the information required for the selected subscription. Passwords are retained only as irreversible hashes.
This data is used to provide the account, secure access, measure usage, answer support requests and meet payment obligations. Account data is kept for the account lifetime, then for the periods required by law and potential disputes.
Providers, rights and complaints
Files are entrusted to no provider. Hosting, email, optional Google sign-in and payments use the providers listed on the Subprocessors page.
You may request access, correction, erasure, restriction or portability where those rights apply, and object to processing based on legitimate interests. You may also complain to the relevant supervisory authority.