Privacy Policy

Version privacy-v4 · Updated September 10, 2026

Your documents

PDF2HTML processes documents to provide the conversion, retention, download and publishing features you request. Source PDFs and stored ZIP packages use private storage and authenticated downloads. Choosing to publish makes the generated page and its required assets public to anyone with the address. Private storage does not make a published page confidential.

Automatic publishing uses the choice captured when a new upload is created. Changing account defaults does not publish older uploads. You can stop public access through the page controls. People who already accessed a public page may have saved copies outside this service.

Retention and deletion

Temporary source PDFs expire 48 hours after acceptance, and temporary generated ZIPs expire 48 hours after completion. Plus retention creates separately managed retained files within the account's storage capacity. Hosted pages have their own publication and expiry settings.

After paid access ends, public hosting stops and retained files have a 30-day download window, subject to account restrictions. The policy provides a suspension notice and a warning seven days before deletion. Paid reactivation restores retained files that have not already been deleted. Cleanup may continue after access stops; storage is released after deletion is confirmed. An over-quota account does not lose files solely because it exceeds its quota.

You can explicitly delete retained files and pages. Files still referenced by another page or protected by pending work may require that use to end before cleanup can finish. Deleting a page alone does not delete its related retained source PDF or ZIP. Those files must be selected separately.

Account and payment records

We retain account details, security and operational records, and payment or receipt information needed to provide the service, prevent abuse, reconcile payments and meet legal obligations. Deleting document files does not erase financial records that must be retained. New online payments are processed by PayPal; Stripe remains involved in historical payment reconciliation. Payment credentials are handled by the payment provider and are not stored by PDF2HTML. Payment and refund confirmations are based on verified PayPal transactions.

We do not sell uploaded documents or their contents. Operational logs are designed to exclude document bytes, extracted text, images, passwords, payment credentials and signed download URLs. Infrastructure and service providers process the data needed to operate storage, conversion, delivery and payments.

Settings has a Privacy section. Download my data returns a copy of your account: profile and consent versions, uploads, conversions, payments, receipts, retained files, pages, domains, settings and the account actions recorded about you. It excludes credentials, verification proofs, internal diagnostics and the stored file bytes themselves, which remain downloadable in Library while they exist. Long lists are capped at the most recent 500 entries per section and say so.

Erase my account asks for your current password and the exact confirmation phrase. It signs you out everywhere, stops your pages serving immediately, cancels Plus at the end of the period you already paid for without refunding unused time, ends credit-storage renewals, releases your public address and any custom domain, and queues your retained files and pages for deletion. It then removes your email address, file names and the customer details stored with receipts. Deletion of stored objects finishes in the background, so we do not report it as complete before it is. Erasing cannot be undone.

Payment and receipt records are kept afterwards, without anything that identifies you, because financial and security retention requires them. For any other privacy request, contact the service operator through your established support channel.