Privacy Policy

Last updated: September 22, 2026

This policy explains what data MHTSdigiXR Universal Converter ("the App") collects, why, and how it's handled. The App is built by Maanagarram Hi Tech Solutions (MHTSdigiXR), based in Chennai, India.

1. What we collect

Account data. When you create an account, we store your email address and a securely hashed (bcrypt) copy of your password — we never store your password in plain text.
Session data. A signed, HTTP-only session cookie keeps you signed in. We log the IP address and browser/device (user-agent) associated with each session for security purposes (e.g. detecting suspicious sign-ins).
Conversion history. When you're signed in, we record metadata about conversions you run — file name, source and target format, file size and timestamp — so your History and Usage pages work. We do not retain the contents of your files after a conversion completes.
Files you convert or scan. Image conversions and the document scanner run entirely in your browser or the app — your photos and files never leave your device for these features. Files sent to our server for Office/PDF conversions or OCR are processed in a temporary location and automatically deleted, typically within 30 minutes and always no later than that.
Camera access. The document scanner asks your device to open its camera only when you tap "Add Page." We don't access the camera in the background, and captured photos stay on your device unless you explicitly run "Scan & OCR" on a page.

2. How we use your data

To operate your account (sign-in, password reset, email verification).
To show you your own conversion history and usage inside the app.
To detect abuse and keep the service secure (rate limiting, session security).
To send you account-related email (verification, password reset) — we don't send marketing email through this app.

3. Third parties we share data with

OpenAI — only when you use the OCR / "Scan & OCR" feature (a Premium feature), the specific image or document page you submit is sent to OpenAI's API to extract text and generate a summary. Nothing else you do in the app is sent to OpenAI.
Cloudflare (Turnstile) — used for CAPTCHA verification on sign-up and after repeated failed sign-in attempts, where enabled. Cloudflare receives your IP address as part of verifying you're not a bot.
Our email provider — used solely to deliver verification and password-reset emails to the address you provide.

We do not sell your data, and we don't use third-party advertising or analytics trackers in this app.

4. Cookies

We use one first-party cookie (mhts_session) to keep you signed in. It's required for the account system to work and isn't used for advertising or cross-site tracking.

5. Data retention

We keep your account data for as long as your account exists. Uploaded files are purged automatically after processing, as described above. If you delete your account (Dashboard → Settings), we immediately erase your personal data — sessions, history, saved payment records and API keys — and anonymize the account record itself. A minimal, non-identifying tombstone record may be retained where required to preserve the integrity of internal administrative audit logs.

6. Your choices

View your conversion history and usage any time from your Dashboard.
Delete your account and personal data at any time from Dashboard → Settings.
Use the App entirely signed out of an account for browser-local features where the app allows it.

7. Security

Passwords are hashed with bcrypt, sessions use signed HTTP-only cookies, and the app is served over HTTPS in production. Access to administrative functions is restricted by account role.

8. Children's privacy

The App is not directed at children under 13, and we don't knowingly collect personal data from children under 13.

9. Changes to this policy

We may update this policy as the App changes. We'll update the date at the top of this page when we do.

10. Contact us

Questions about this policy or your data? Reach us via mhtsdigixr.com.

← Back to the converter