Data handling

What we store

• Account: email + (optionally) display name. Nothing else.
• Files: input and output objects, on encrypted ZFS-backed MinIO. Object keys are scoped per user.
• Metadata: source/target format, preset, timestamps, sizes, durations.

Retention

Tier	Inputs	Outputs
Free	24 h	24 h
Pro	24 h	7 days

Cleanup runs nightly. MinIO bucket lifecycle policies enforce the same window as a safety net.

Output metadata

Stripped by default for every conversion (EXIF, ID3, document author fields). Pro users may opt in — globally or per-conversion — to preserve them.

What we do not do

• We do not sell or share your data.
• We do not retain files beyond the windows above.
• We do not retain payment method data — that's Stripe's job in V2.