Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. Data I Collect

I collect and process the following types of data:

• Uploaded Files: Files you upload for processing (images, videos, documents). These are automatically deleted after 1 hour.
• Feedback Data: If you submit feedback, I collect the URL you were on and your description of the issue.
• Theme Preference: Your light/dark theme preference stored locally in your browser.
• Consent Status: Your consent choice stored locally in your browser.

3. Purpose of Processing

I process your data for the following purposes:

• To provide file processing services (compression, conversion, etc.)
• To improve the services based on your feedback
• To remember your display preferences

4. Legal Basis

I process your data based on:

• Consent: For file uploads and processing, including sensitive personal data (such as identity documents, medical records, or financial documents). By uploading files, you explicitly consent to their temporary processing.
• Legitimate Interest: For improving the services through feedback analysis.

5. Data Retention

I retain your data as follows:

• Uploaded Files: Automatically and permanently deleted after 1 hour from upload.
• Feedback Data: Retained for up to 2 years for service improvement purposes.
• Local Storage Data: Stored in your browser until you clear it or revoke consent.

6. Third-Party Services

I use the following third-party services. None of them receive any of your uploaded files:

• Google Analytics (GA4): For anonymized site traffic analysis (Privacy Policy)
• Google Fonts: For typography (Privacy Policy)
• Fontshare: For typography (Terms)
• jsDelivr: For icon delivery (Privacy Policy)

7. Your Rights

Under GDPR, LQPD (Andorra), and CCPA, you have the following rights:

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your personal data.
• Right to Data Portability: Receive your data in a portable format.
• Right to Object: Object to processing of your personal data.
• Right to Withdraw Consent: Withdraw consent at any time.

To exercise any of these rights, write to me at ninorocafulle@gmail.com.

8. Security Measures

I take the following measures to protect your data:

• All connections are encrypted using HTTPS/TLS.
• Uploaded files are automatically deleted after 1 hour.
• I do not store files longer than processing requires.
• Access to server infrastructure is restricted and monitored.

9. International Transfers

Your data may be processed in Andorra and the European Economic Area. Andorra is recognized by the European Commission as providing an adequate level of data protection.

10. Contact Us

For any questions about this Privacy Policy or to exercise your data protection rights, please contact:

11. Changes to This Policy

I may update this Privacy Policy from time to time. Any change is posted on this page and updating the "Last updated" date.