Privacy Policy

• Account data — email address, name (optional), hashed password. If you sign in with Google, we receive your name, email, and profile picture via Google OAuth.
• Files you upload — processed as requested, then automatically deleted (see retention below).
• Payment data — handled entirely by Stripe. We store Stripe session IDs for transaction records but never see or store your card details.
• Usage data — job type, file count, processing status, and payment amounts for billing and service operation.

• Contract performance (Art. 6(1)(b) GDPR) — processing your files, managing your account, handling payments.
• Legal obligation (Art. 6(1)(c) GDPR) — retaining payment records as required by German tax law (§ 147 AO).
• Legitimate interest (Art. 6(1)(f) GDPR) — rate limiting and abuse prevention.

We do not use your data for advertising, profiling, or AI model training.

We share data with payment processors, hosting and infrastructure providers, database providers, email delivery providers, and AI processing providers. Where providers are located outside the EU/EEA, we rely on adequacy decisions or appropriate safeguards (such as Standard Contractual Clauses).

Some conversions run entirely in your browser — no data is sent to our servers.

• Uploaded files — deleted within 12 hours of upload.
• Output files — deleted 1 hour after download or within 12 hours, whichever comes first. Permanently deleted after 30 days.
• Account data — kept until you delete your account.
• Payment records — retained for 10 years (§ 147 AO).

We use a single session cookie for authentication (httpOnly, secure, sameSite). No tracking, analytics, or third-party cookies.

Under the GDPR, you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21).

You can exercise these rights directly from your account settings (export data, delete account) or by contacting till@wwworks.info.

You have the right to lodge a complaint with your data protection supervisory authority. The responsible authority is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz — www.datenschutz.rlp.de