This Privacy Policy explains how Fylzap ("we", "us", or "our") collects, uses, and protects your information when you use our document conversion and AI-ready Knowledge Pack service at fylzap.com ("Service"). By using our Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Account Information
When you create an account, we collect your name, email address, and password (stored as a secure hash). If you sign in with Google or GitHub, we receive your name, email, and profile picture from those services.
1.2 Files You Upload
Your original uploaded files are never stored — they are discarded immediately after conversion is complete. We do not analyze, share, or retain your original file contents beyond the conversion process.
Converted output files: If you have conversion history enabled, converted output files are stored for up to 24 hours in encrypted storage to allow re-downloading from your history. They are permanently and automatically deleted after 24 hours with no exceptions. If you do not use the re-download feature, converted files are streamed directly to your browser and discarded from our servers immediately.
1.3 Conversion History
If you enable conversion history in your account settings, we store metadata only about your conversions — filename, input format, output format, file size, and date. No file content is included in history records. This feature is opt-in and can be disabled or cleared at any time from your dashboard. History metadata is retained for the period defined by your plan:
- Free: 7 days
- Pro: 90 days
- Enterprise: 1 year
1.4 Usage Data
We collect anonymized usage data including conversion counts, file types used, and feature usage to improve our Service. This data is never linked to individual users in our analytics.
1.5 Payment Information
Payments are processed by Paddle (paddle.com), our payment processor. We do not store your credit card details. Paddle acts as the Merchant of Record and handles all payment data in accordance with PCI DSS standards. We receive only your subscription status and Paddle customer ID.
1.6 API Keys
API keys you generate are stored as secure hashes. The full key is shown only once at creation and is never stored in plaintext. We store only the key prefix for identification purposes.
1.7 Pack Issue Reports
If you report an issue with a Knowledge Pack, we store the associated job ID, the original file name (not the file content), your account ID if you were signed in at the time, the note you write describing the issue, and the submission timestamp. If you submit a report while signed out, it is stored anonymously with no account link. This information is used solely to triage and improve conversion quality and is not shared with any third party.
2. How We Use Your Information
- To provide and maintain the Service
- To process your file conversions
- To manage your account and subscription
- To send transactional emails (email verification, password reset)
- To enforce our usage limits and Terms of Service
- To improve the Service through anonymized analytics
- To respond to your support requests
3. Data Retention
- Original uploaded files: Never stored — discarded immediately after conversion
- Converted output files: Stored for 24 hours maximum if re-download is enabled, then permanently deleted
- Conversion history metadata: 7 days (Free), 90 days (Pro), 1 year (Enterprise) — if history is enabled
- Pack issue reports: Retained indefinitely for product improvement purposes, or until you request deletion
- Account data: Retained until you delete your account
- Payment records: Retained as required by law (typically 7 years)
4. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We share data only with:
- Paddle: For payment processing and subscription management
- MongoDB Atlas: For secure database storage (data stored in their cloud)
- LlamaParse: Used when AI mode is enabled, either directly or automatically as part of Knowledge Pack generation. Your PDF content is sent to LlamaIndex for processing. See their privacy policy at llamaindex.ai
- OCR.space (optional): If you use image OCR, your image is sent to OCR.space for processing. See their privacy policy at ocr.space
- Anthropic (Claude API): If you use AI Clean, either directly or automatically via Knowledge Pack generation. Your converted text content is sent to Anthropic for processing. See their privacy policy at anthropic.com/privacy
5. Cookies
We use only essential cookies for authentication (access_token, refresh_token). These are HttpOnly, secure cookies required for the Service to function. We do not use advertising cookies or third-party tracking cookies.
6. Security
We implement industry-standard security measures including HTTPS encryption, bcrypt password hashing, JWT authentication, rate limiting, and HttpOnly cookies. Converted output files stored for re-download are encrypted at rest in MongoDB Atlas. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Clear your conversion history at any time from your dashboard
- Opt out of conversion history entirely from your dashboard settings
To exercise these rights, contact us at privacy@fylzap.com.
8. Children's Privacy
Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Your continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy, please contact us at: