Privacy Policy

This Privacy Policy describes how MediaConvert.io ("we," "our," or "us") collects, uses, and shares information about you when you use our media conversion API service.

Information We Collect

Account Information

When you create an account, we collect:

  • Email address (required for account creation and communication)
  • Name (optional, for personalization)
  • Payment information (processed securely through Stripe)
  • API usage statistics and billing information

Usage Information

When you use our service, we automatically collect:

  • API requests and responses (for billing and service operation)
  • File metadata (size, format, processing parameters)
  • Usage patterns and service performance metrics
  • IP addresses and technical information for security and service delivery

Media Files

Important: We do NOT store your media files. MediaConvert.io operates using a direct processing model:

  • Files are processed directly from your S3-compatible storage via presigned URLs
  • Processed files are written directly back to your storage
  • Files are temporarily cached in memory during processing only
  • No permanent copies of your media content are stored on our servers

How We Use Your Information

We use the information we collect to:

  • Provide and maintain our media conversion service
  • Process your API requests and deliver converted media files
  • Calculate usage-based billing and process payments
  • Send service-related communications and support responses
  • Monitor service performance and prevent fraud
  • Improve our service based on usage patterns and feedback
  • Comply with legal obligations and enforce our Terms of Service

Information Sharing

We do not sell, trade, or rent your personal information. We may share information only in these limited circumstances:

Service Providers

  • Stripe: Payment processing (governed by Stripe's privacy policy)
  • Cloud Infrastructure: Service hosting and processing (no access to your media files)
  • Monitoring Services: Performance and security monitoring (anonymized data only)

Legal Requirements

We may disclose information if required by law, legal process, or governmental request, or to protect our rights, property, or safety.

Data Security

We implement appropriate security measures to protect your information:

  • All data transmission is encrypted using HTTPS/TLS
  • API tokens are securely hashed and stored
  • Payment data is processed through PCI DSS compliant systems
  • Access to personal information is restricted to authorized personnel only
  • Regular security audits and monitoring

Data Retention

  • Account Data: Retained while your account is active and for a reasonable period after deletion
  • Usage Records: Retained for billing and compliance purposes (typically 7 years)
  • Media Files: Never permanently stored - only processed temporarily in memory
  • Logs: System logs retained for up to 90 days for service operation and security

Your Rights (GDPR)

If you are in the EU, you have certain rights regarding your personal data:

  • Access: Request a copy of personal data we hold about you
  • Rectification: Request correction of inaccurate personal data
  • Erasure: Request deletion of your personal data
  • Portability: Request transfer of your data in a structured format
  • Restriction: Request limiting the processing of your personal data
  • Objection: Object to processing based on legitimate interests

To exercise these rights, contact us at support@mediaconvert.io.

International Data Transfers

Our service operates globally. Your data may be processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place for international transfers in compliance with applicable law.

Cookies and Analytics

We use essential cookies and similar technologies to:

  • Maintain your login session
  • Remember your preferences
  • Ensure service security and prevent fraud
  • Analyze service usage patterns (anonymized)

You can control cookie settings through your browser, though some functionality may be limited if disabled.

Children's Privacy

Our service is not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by:

  • Email notification to your registered email address
  • Prominent notice on our website and service
  • Updating the "Last Updated" date below

Contact Us

If you have questions about this privacy policy or our privacy practices, contact us:

Last Updated: August 29, 2025
Effective Date: August 29, 2025