Privacy Policy & Data Protection Pledge

When you upload a file (such as a Word document, spreadsheet, PowerPoint slide deck, or image) for conversion:

• Files are processed exclusively in ephemeral, temporary RAM/disk storage with randomized cryptographically unguessable filenames.
• Immediate Deletion: The moment your converted file is streamed to your browser, the original upload and the converted output are immediately purged from our servers.
• Automated Garbage Collection: Any orphaned temporary working files are wiped clean on a periodic background cycle (< 60 minutes).

Many of our core utilities operate entirely within your browser using WebAssembly, HTML5 Canvas, and Client-Side Web Workers. For the following tools, your files never leave your computer:

• Privacy Metadata & EXIF Scrubber: Strips GPS tags and camera metadata locally on your device before saving.
• Digital Signature Pad: Vector rendering and paper background removal execute 100% on your local canvas.
• PDF Merging, Splitting & Watermarking: Handled client-side via embedded WebAssembly PDF-Lib.
• Daily Image Compressor & Social Resizer: Client-side canvas compression ensures maximum privacy and instant speed.

To maintain server health and protect our infrastructure from malicious abuse, all uploaded files pass through a lightweight, automated heuristic scanner that verifies magic bytes, detects double extensions (e.g. .php.jpg), and scans for embedded scripts. This scanner operates programmatically; no human ever inspects your files or their text contents.

Our tools are completely free for all visitors. We provide a daily quota of 5 files for guests. Visitors who register for free unlimited access provide only:

• Username & Email Address: Used solely to identify your account and grant unlimited daily quota.
• Password: Irreversibly hashed using military-grade BCrypt (cost factor 12). We cannot read or recover your plain text password.
• We do not request credit cards, physical addresses, or phone numbers.

We maintain an ultra-minimal cookie footprint:

• Session Cookie (PHPSESSID): A secure, HttpOnly, SameSite=Lax cookie that maintains your login session and daily conversion limits.
• Clay Theme (clay_theme): Stored locally in your browser's localStorage to remember your preference between Light Clay and Dark Slate Clay modes.
• No Third-Party Ad Trackers: We do not deploy third-party advertising tracking cookies or data brokers.

Your files and proprietary data are never used to train machine learning models or artificial intelligence algorithms. We do not aggregate, analyze, or monetize your documents.

XportFlow Studio is a specialized utility service developed and operated by xportios.com.

If you have questions regarding this Privacy Policy, or wish to request the deletion of your user account, please contact us at: