Privacy Policy
Last updated: 11 July 2026
1. The short version
Free tools convert your files locally — the files never leave your device and we never see them. Pro server tools process files in an ephemeral sandbox and delete them immediately after conversion. We store the minimum needed to run accounts and billing. For product analytics we use privacy-friendly, cookieless measurement that counts page views in aggregate — no cookies, no advertising trackers, and nothing that profiles you as an individual.
2. Who is responsible
The data controller is Favour Moses, trading as Deskwright (a sole trader), United Kingdom. Contact: support@deskwright.com.
3. What we collect
Account data — your email address and a salted password hash (or, if enabled, your Google sign-in identity). We never store plain passwords.
Session security — when you sign in, the active-session record includes your IP address and device/browser information (user-agent) to help protect your account. These are kept while the session is active and deleted when the session ends or your account is deleted.
Billing data — handled by Lemon Squeezy, our Merchant of Record (the seller of record for your purchase, who also handles VAT and sales tax). We store your Lemon Squeezy customer and subscription identifiers, plan, and status. We never see or store card numbers.
Usage events — for metering and abuse prevention we record which tool ran, byte counts, and timing. We do not record file contents or file names.
Analytics — we count page views in aggregate using Vercel Web Analytics, a first-party, cookieless measurement tool. It records anonymous, aggregated metrics (which pages are visited) and does not set cookies, track you across sites, or build a profile of you. Your files and file names are never involved.
Email you give us — if you join the Pro launch waitlist we store your email address so we can tell you when Pro launches. If you send a team enquiry (“Protect your team”) we store your work email and any company name or team-size range you choose to add, so we can reply. That is all we keep from those forms — we do not share it, and you can ask us to delete it at any time. Using the free tools never requires any of this.
Brand kit — if you save a logo, we store that image until you delete it from your account.
Cookies — a single session cookie for sign-in. No advertising cookies, and no analytics cookies (our analytics is cookieless).
4. What we deliberately do not collect
Files converted with free (local) tools are never uploaded, logged, or seen by us. Files sent to Pro server tools are not stored: they are processed and deleted immediately, and their contents are never logged.
5. Processors we use
Vercel (hosting, logo storage, and cookieless Web Analytics), Neon (database, including waitlist and team-enquiry emails), Lemon Squeezy (payments, as Merchant of Record), and Railway (Pro conversion processing). Each processes data only to provide their service to us.
6. Retention and deletion
Account and billing records are kept while your account exists and as required for tax and accounting. You can delete your saved brand kit in-app at any time. To delete your account and associated data, contact support@deskwright.com — we honour verified deletion requests within 30 days, subject to legal retention obligations.
7. Your rights
Under the UK GDPR and the Data Protection Act 2018, you may request access to, correction of, or deletion of your personal data, and you may complain to the Information Commissioner’s Office (ICO). Contact support@deskwright.com to exercise these rights.
8. Changes
We may update this policy; material changes will be notified on the site or by email.