Privacy Policy
This policy explains what Filesmithy, operated by Cor Sawai, does with your data. The short version: your files are processed in memory and discarded as soon as the conversion finishes.
Files you upload
Uploaded files are held in server memory only for as long as the conversion takes. They are not written to disk, not copied to object storage, and not retained after the response is sent. A conversion that fails or times out discards the file the same way. Because nothing is stored, there is no upload history to browse, and no stored copy for us to hand over or for an attacker to steal.
We do not read the contents of your files beyond what the conversion requires, do not use them to train machine-learning models, and do not sell or share them.
Technical data
We process a limited amount of operational data to run the Service:
- IP address, user agent, request time, endpoint and response status, in server logs.
- File size, format and dimensions, to enforce limits and diagnose failures.
- Error diagnostics when something breaks.
This data is used to operate the Service, enforce rate limits, prevent abuse and fix faults. The legal basis under the GDPR is our legitimate interest in running a secure service. Logs are kept for a limited period and then deleted.
Cookies
We do not use advertising or third-party tracking cookies. Any cookie we set is strictly necessary for the Service to function, such as keeping you signed in once accounts exist.
Subprocessors
We rely on the following providers, who process data on our behalf:
- Microsoft Corporation: Application and API hosting (Azure Container Apps)
- Upstash, Inc.: Rate limiting (stores a short-lived counter keyed by IP address)
This list will grow as we add accounts, payments and storage. We will update this page before any new provider begins processing your data.
International transfers
Our providers may process data outside your country, including in the United States. Where personal data is transferred out of the EEA or the UK, the transfer relies on the Standard Contractual Clauses or another approved safeguard offered by the provider.
Your rights
Depending on where you live, you may have the right to access, correct, delete, port or object to the processing of your personal data, and to withdraw consent. Because uploaded files are never retained, a deletion request concerns only account and log data.
To exercise any right, email legal@filesmithy.com. We will respond within the time limit set by applicable law. You may also complain to your local data-protection authority.
Children
The Service is not directed at children under 13, and we do not knowingly collect their personal data.
Security
Traffic is served over HTTPS. Uploads are validated by content rather than filename, run under strict size, pixel and time limits, and are processed in isolated worker threads. No system is perfectly secure, so please do not upload material you cannot afford to have exposed.
Changes and contact
We will post changes here and update the date above. Questions: legal@filesmithy.com. See also our Terms of Service.