BitMorph

Privacy Policy

Last updated: 6 August 2026

BitMorph is built privacy-first. Files that use our servers are encrypted in transit and at rest, processed briefly, then automatically deleted, and never used to train any AI model. This policy explains exactly what happens to your files and personal data.

1. The short version

  • Free, in-browser conversions run entirely on your device, your file is never uploaded to us.
  • Cloud jobs (high-fidelity Office conversion, OCR, video, AI) are encrypted in transit, processed on secure servers, and auto-deleted afterwards. We never use your files to train any model.
  • We store the minimum account data needed to run the service. No ads, ever. We do not sell your data.

2. Your files

On-device conversions. For the free, in-browser tools, conversion happens locally in your browser. The file stays on your device and is never transmitted to BitMorph. There is nothing for us to retain.

Cloud conversions. Some features need our servers. In those cases the source file is uploaded over an encrypted connection, processed, and the source is deleted immediately. The result is kept only long enough for you to download it, a short window that depends on your plan (Free: none, on-device; Pro: 24 hours; AI Pro: 48 hours; Business: 72 hours), after which it is automatically deleted. You can delete a result yourself at any time.

We do not log file contents, and we never use your files, prompts, or outputs to train any AI model.

3. Account & usage data

An account is required to use BitMorph. We store:

  • Account details: your email address and authentication data (handled by our auth provider).
  • Subscription & billing state: your plan and status (payment details are handled entirely by Stripe, card data never touches our servers).
  • Usage metadata: counts needed for metering and fair use (e.g. number of AI pages, cloud jobs), and your Transformation History (formats, timestamps, never the files themselves).

4. Analytics

We use privacy-friendly, cookie-less analytics to understand product usage in aggregate. We do not build advertising profiles and do not track you across other websites.

5. Sub-processors

We rely on a small set of infrastructure providers to run the service (hosting, storage, database/auth, payments, email, error monitoring). Each processes data only to provide their service to us, under a data-processing agreement.

6. Your rights

Depending on where you live (including under the EU/UK GDPR), you may have the right to access, correct, export, or delete your personal data. Because files are ephemeral and we store minimal data, erasure is straightforward, you can delete results instantly, and account deletion removes your data.

7. Contact

Questions or requests: privacy@bitmorph.io. Security reports: security@bitmorph.io.