This policy explains what personal data Evoltron Ltd collects, why, and your rights. We are built around a privacy-first principle: we collect as little as we can, and we don’t store the files you convert.
1. Who is responsible for your data
Evoltron Ltd is the data controller. Registered office: 1 Maidstone Road, Sidcup, Kent, England, DA14 5RH. Contact: info@evoltron.co.
2. What we collect
Files and content you convert
With CleanMD, conversions run in your browser wherever possible, and your files are not uploaded to or stored on our servers. Some conversions (for example scanned documents or images that require AI processing) send the relevant content to our processing providers only for the time needed to produce the result. That content is not retained afterwards.
Account data
If you create an account, we process your email address and authentication details to manage your access and any credits or subscription.
Payment data
Payments are handled by Stripe as merchant of record. We do not receive or store your full card details; we may receive limited transaction metadata (such as a payment reference and status) to fulfil your purchase.
Usage and technical data
We use privacy-friendly, cookie-less analytics to understand aggregate usage, and we process technical data such as IP address for security and to enforce fair-use limits.
3. How we use your data
- To provide and operate our products and services
- To process payments and deliver what you purchased
- To secure our systems and prevent abuse
- To respond to your enquiries and provide support
- To meet legal and accounting obligations
4. Legal bases (UK GDPR)
We rely on: performance of a contract (to provide the service you request); legitimate interests (security, service improvement, fraud prevention); consent (where required, e.g. optional communications); and legal obligation (accounting, tax).
5. Who we share data with
We use trusted processors to run our service, including:
- Stripe — payments and merchant-of-record services
- Supabase — authentication and account database
- Cloudflare — hosting and privacy-friendly analytics
- AI processing providers (such as Google and Anthropic) — to perform certain conversions, on content sent only for the duration of the conversion
We do not sell your personal data.
6. International transfers
Some providers process data outside the UK/EEA. Where they do, appropriate safeguards (such as standard contractual clauses) are in place to protect your data.
7. Data retention
Converted files are not retained. Account data is kept while your account is active and deleted on request or after a reasonable period of inactivity. Transaction records are retained as required for accounting and legal purposes.
8. Your rights
Under UK GDPR you can request access to, correction, or deletion of your personal data, object to or restrict certain processing, and request portability. To exercise any right, email info@evoltron.co. You also have the right to complain to the UK Information Commissioner’s Office (ICO).
9. Cookies
We use only essential storage needed to run the service and cookie-less analytics. We do not use advertising or tracking cookies.
10. Changes
We may update this policy and will post the revised version here with a new date.
11. Contact
Questions about your privacy? Email info@evoltron.co.