Data Processing

Role allocation

For the "Protect PDF", "Unlock PDF", and "Optimize PDF" tools, we process your uploaded file on our server, exclusively to complete the processing job you initiated. If your file contains personal data (including of third parties), we process it on your behalf within the meaning of Art. 28 GDPR — you remain the controller, we act as processor for this one job.

Sub-processor used

We use Hetzner Online GmbH (Germany) to host our servers. A data processing agreement under Art. 28 GDPR with Hetzner as hosting provider is currently being prepared. Beyond this one hosting sub-processor, we currently do not use any further sub-processors for processing your files.

Technical and organizational measures

Processing without a shell: server-side PDF processing runs through directly started native processes, never through a shell.

Encrypted transmission: converterfleet.com, app.converterfleet.com, and api.converterfleet.com are served exclusively over HTTPS with automatically managed certificates.

Time-limited storage: results are retained for a maximum of 900 seconds (15 minutes), failed jobs for a maximum of 600 seconds (10 minutes), and then automatically deleted. No storage beyond this occurs.

Original filename is not transmitted: your file reaches our server under an automatically assigned name, not under its original filename.

Access protection: each processing job is bound to the session that created it — status, result, or deletion can only be retrieved with that same session.

Container isolation: our server processes each run without root privileges, without access to the host's Docker socket, and without privileged mode.

Further information

For further information on how we handle personal data, including your rights as a data subject, please see our Privacy Policy.