Privacy Policy
Last updated November 12, 2026 (version 2.1)
The short version
- Your file never leaves your browser. Conversion runs in your browser tab. Your transactions, payees, amounts and balances are never sent to us or anyone else, and nothing about the file reaches us either: not its name, its size or how many rows it has.
- You can use every converter without an account. Accounts are only for Day Pass and Unlimited customers, and store your email address, your plan and your purchases, nothing about your files.
- We do not sell personal information, run ads or ad trackers, or use your information to train AI models.
- You can delete your account yourself, at any time, from your account page.
FileInto is a product of Native Code LLC. This policy explains what FileInto does with personal information. It is the FileInto supplement to the Native Code Privacy Policy, which covers every Native Code product. Where the two differ about FileInto, this page controls.
1. Who we are
Native Code LLC is a limited liability company registered in the State of Nevada, United States, based in Las Vegas, Nevada. In this policy "we", "us" and "our" mean Native Code LLC, and "FileInto" means the website at fileinto.com and the converters on it. For your account and the information in this policy, we are the controller.
2. Your files
When you choose a file, code running in your browser reads and converts it on your device. The converted file is created by your browser. We never receive the file, its name or its contents, so there is nothing for us to store, read, share or delete. Download limits are checked by your browser, not by us.
One exception stays on your device too. If you choose to sign up or sign in partway through a conversion, your browser keeps the file's rows in its session storage so the conversion is still there when you come back. That copy never leaves your browser, is removed as soon as it is restored, and is cleared when you close the tab.
If you have a Day Pass or Unlimited, your browser asks us once per visit whether your plan is still active. That request carries nothing about your files: no file, no file name, no size and no row count.
3. Information we collect
Information you give us
- Account. Your email address and a password, which our authentication provider stores as a secure hash. If you sign in with Google, Google gives us your email address, your name and a link to your profile picture.
- Purchases. Payments are taken by Stripe through Link, which acts as the merchant of record (see section 5). We receive and keep a customer ID, what you bought, the amount, the payment status and the renewal or expiry date. We never see or store your card number.
- Messages. If you email hello@fileinto.com or use the contact form, we receive your email address, your name if you give it, the topic and whatever you write. Please do not send bank files or account numbers; we don't need them to help.
Information collected automatically
- No conversion log. Until November 12, 2026, account holders' downloads over 25 transactions recorded the converter used and the number of rows, never file names or contents. We stopped recording this and deleted all of it on November 12, 2026.
- Server logs. Our hosting provider records the request path, time, response status, browser user agent and IP address, to keep the service running and spot abuse.
- Website analytics. We use Vercel Web Analytics to count page views. It sets no cookies, does not build a profile of you, does not follow you across other websites, and reports only aggregate figures such as pages, referrers, country and device type.
4. Why we use it, and our legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Run your account and apply your plan's limits | Without it there is no account | Performance of a contract |
| Take payment and handle renewals and refunds | You bought something | Performance of a contract |
| Send account email (confirm your address, reset your password) | You need it to use your account | Performance of a contract |
| Answer your messages | You asked us something | Legitimate interests |
| Keep the service up and safe, investigate abuse | The service has to work | Legitimate interests |
| Count page views in aggregate | To see which pages help people | Legitimate interests |
| Keep tax and accounting records | The law requires it | Legal obligation |
Where we rely on legitimate interests, you can object, and we will stop unless we have a compelling reason not to.
5. Who receives it
FileInto uses these providers. Each receives only what its job needs and is bound by contract not to use it for its own purposes. All of them run in the United States.
| Provider | What it does for FileInto | What reaches it |
|---|---|---|
| Vercel Inc. | Hosts the website, runs the server functions, page analytics | Request logs including IP address; aggregate page views |
| Supabase Inc. | Account database and sign-in | Email address, password hash, plan, purchases |
| Stripe, Inc. (through Link) | Checkout, payment, receipts, sales tax and the billing portal, as merchant of record | Card details, which only Stripe holds, plus billing name, email and country |
| Resend (Plus Five Five, Inc.) | Sends account emails and delivers contact form messages to us | Your email address and the email's content |
| Google LLC | Sign in with Google, only if you choose it | Your Google sign-in |
As merchant of record, Stripe and Link also process your payment information under their own privacy policies. Native Code's company-wide list of providers is on the Subprocessors page. Beyond these providers we disclose information only when you tell us to, when the law requires it (we check that a request is valid and tell you unless we are prohibited), or if FileInto or Native Code LLC is sold, in which case the buyer stays bound by this policy until you are told otherwise.
6. What we never do
- We do not sell personal information or share it for cross-context behavioral advertising.
- We do not run advertising, advertising networks or cross-site tracking.
- We do not supply information to data brokers.
- We do not use your information to train machine learning models, ours or anyone else's.
- We do not make automated decisions about you that have legal or similarly significant effects.
7. Cookies and browser storage
FileInto sets no advertising, tracking or third-party cookies, so there is no consent banner. These are the only items it stores in your browser:
| Name | Type | Purpose |
|---|---|---|
sb-… | Cookie | Keeps you signed in. Set only when you sign in |
fi_signed_in | Cookie | Tells the page you are signed in and on which plan, so the header shows the right buttons. Contains no personal information |
fi_pending_file | Session storage | Keeps your conversion while you sign up or sign in (section 2). Never sent to us |
8. How long we keep it
| What | How long |
|---|---|
| Your account and purchases | Until you delete your account, then removed from our database straight away |
| Database backups that still contain a deleted account | Until they roll over, at most 35 days. Backups are never used to restore a deleted account |
| Payment, receipt and tax records | Kept by Stripe and Link as the law requires, and by Native Code LLC for 7 years for tax purposes |
| Server logs | Up to 30 days |
| Messages you email us or send with the contact form | Up to 24 months, so we can pick up a conversation |
| Aggregate page view counts | Indefinitely; they cannot identify anyone |
9. Deleting your account
Open your account page and use Delete account. It takes effect immediately: we cancel any active Unlimited subscription with Stripe, then delete your profile and purchases, and sign you out. Cancelling this way ends Unlimited straight away, without a refund for the rest of the period, so if you want to keep access until the end of what you paid for, cancel renewal first and delete later. If you can no longer sign in, email hello@fileinto.com from the address on the account and we will delete it for you.
10. Your rights
Wherever you live, you can ask to know and get a copy of what we hold about you, correct it, delete it, take it elsewhere, object to or restrict a use, and withdraw consent. We do not sell or share personal information for advertising, so there is nothing to opt out of, but we honor those requests and the Global Privacy Control signal. Nevada residents may also submit a request not to sell; we record it, although we do not sell.
Email hello@fileinto.com or use Native Code's privacy rights request form. We answer within 45 days, may need to verify that the request is yours, and will never treat you differently for using a right. If we refuse a request you can appeal by replying to our answer, and we will explain the outcome in writing within 45 days. People in the United Kingdom and the European Economic Area can also complain to their data protection authority at any time.
11. Children
FileInto is for adults handling their own or their business's finances. It is not directed to children, and we do not knowingly collect personal information from anyone under 13, or under 16 where local law sets that age. If you think a child has given us information, email hello@fileinto.com and we will delete it.
12. Where your information is stored
We are based in the United States and FileInto runs on infrastructure in the United States. If you use it from elsewhere, your account information is transferred to and processed in the United States. For information covered by United Kingdom or European law, transfers rely on the Standard Contractual Clauses and the UK Addendum, as described in the Native Code Privacy Policy.
13. How we protect it
Your files are protected by never leaving your device. Account information is encrypted in transit and at rest, each account can read only its own records at the database level, access is limited to the people who need it, and credentials are kept out of source code. More detail is on Native Code's Security page. If a breach affects your information, we will notify you and the relevant regulator within the time the law requires.
14. Changes to this policy
We publish any new version here with a new version number and date. If a change materially reduces your privacy, we will tell account holders by email before it takes effect, and we will not apply it to information already collected.
15. Contact
Use the contact form or email hello@fileinto.com. Native Code LLC, Las Vegas, Nevada, United States.