Privacy Policy
Last updated : July 17, 2026
The essentials, in three points
Your files are converted on our servers, in France.
They are encrypted in transit and permanently deleted as soon as the conversion is done.
We do not trade them in any way: they are never sold, shared, analysed, or used to train an artificial intelligence model.
Data controller
The data controller is the publisher of ConvertLab, available at convertlab.cloud.
Contact: privacy@convertlab.cloud
Publishing group: ElouardiGroup.com
Your files
Conversion runs on our servers, not in your browser.
Where: on a dedicated server located in France, operated by OVHcloud. Your files never leave the European Union.
How: the transfer is encrypted (HTTPS/TLS).
For how long: your file is placed in a temporary workspace, converted, and that workspace is destroyed entirely as soon as the result is sent back. No copy is kept.
Who can access them: nobody. Your files are never opened, indexed or analysed, and are never passed to a third party.
Artificial intelligence: your files are never used to train or improve any model, ours or anyone else’s.
We do not trade your data
ConvertLab does not sell, rent, share or exchange your files, nor any data related to them.
Our business model rests on two sources, and two only: the paid NoLimit plan and advertising. Your files belong to neither.
Technical data we keep
To enforce the free plan quotas (10 files and 1 video per day), our server records your IP address and the number of conversions made today.
This data is deleted automatically after 48 hours. Legal basis: legitimate interest (abuse prevention, art. 6.1.f GDPR).
No file name, no content and no extension is stored. We know how many files an IP address converted today, never which ones.
Like any website, ConvertLab also generates technical logs at its host OVHcloud, kept for up to 30 days for security purposes.
NoLimit and payment
Payment is handled by Stripe, a PCI-DSS certified provider. ConvertLab never has access to your card details.
We only keep an anonymous access token, stored in your browser, along with the transaction reference and its expiry date.
No account is created and no email address is passed to us. The token expires automatically after 31 days.
Cookies and advertising
ConvertLab uses strictly necessary cookies (language preference, session) and Google AdSense, which may set third-party advertising cookies.
Advertising cookies are only set after your consent, which you can decline via the banner shown on your first visit.
The NoLimit token is stored in your browser’s local storage. It is not a cookie: it is never sent to a third party, and you can remove it by clearing the site data.
Transfers outside the European Union
Your files never leave the European Union.
Two of our providers are based in the United States: Stripe (payment) and Google AdSense (advertising). They have no access to your files or conversion data. Their transfers are covered by the European Commission’s standard contractual clauses.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data.
In practice, the only personal data we hold is your IP address, for at most 48 hours.
To exercise your rights: privacy@convertlab.cloud. You may also lodge a complaint with your national data protection authority.