Privacy Policy

Who we are

LiteConvert ("the service") is a free online file converter operated as a Lite Lake product. The service is operated and controlled by 厦门静笃网络科技有限公司 (legal name in Chinese, as registered; company site: gentleltd.cn).

The controller is reachable for everything privacy-related — questions, requests, complaints — through a single official email: official@biz.gentleltd.cn. We do not publish a postal address or phone line; requests by email are treated the same as written requests by post.

Data we collect

Converting a file is an anonymous act by default. Depending on how you use the service, we process:

• Uploads and results: the file you submit and the converted output, kept only for the retention window below.
• Conversion records: the conversion type, file name, size, outcome, duration, and a salted hash of the client IP address — never the raw IP.
• Device history link (anonymous use): a random device ID stored in your browser's local storage; we keep only a salted hash of it with the record.
• Account data (optional): if you sign in through the OpenID Connect (OIDC) provider of your choice, your sign-in identity, your conversion history, and your API keys — keys stored only as SHA-256 hashes, never in plaintext and never in logs.
• No advertising data: we do not buy, sell or enrich advertising profiles, and we do not run third-party advertising networks on this site.

Purposes and legal basis

We process data to: deliver the conversion you asked for (performance of a contract); show honest success-rate statistics and understand which formats fail (legitimate interest); keep an optional, linkable history for you (your request or consent, and always deletable by clearing browser data or by email); and prevent abuse of the free tier (legitimate interest).

We do not process your files or data for advertising, profiling, or resale — there is no hidden second purpose.

How long we keep things

Files and results are automatically deleted within 24 hours of a finished conversion. This is a system-enforced retention setting, not a discretionary promise; download links stop working once deletion happens.

Conversion records are kept for at most 90 days, then anonymized: the row survives for aggregate statistics, but every link to a device or account is wiped.

What the interface shows is narrower than what we keep: the home page lists only the last 24 hours of available results, and the history and account pages list only the last 7 days.

Account data is kept while your account is active. Ask by email (section 1) and we will remove it.

Sharing and processors

Your files are never sold or shared as content. Conversions run on conversion infrastructure operated by us. To run the service at all we rely on a small set of processors under contract:

• A hosting provider that serves the website and API.
• A cloud object storage service that holds your upload and the result during the 24-hour retention window, after which both are deleted.
• The OIDC identity provider you choose at sign-in; we receive only your sign-in identifier, not your provider password.
• Analytics, if and when enabled, will be disclosed here by name — nothing advertising-grade runs today.

International transfers

Our infrastructure and processors may be located in countries other than yours. Where that happens, transfers rest on the safeguards required by applicable law, and the short retention windows above bound the exposure: most data is gone within 24 hours anyway.

Security measures

Traffic is encrypted in transit (HTTPS). API keys are stored only as SHA-256 hashes: the plaintext is shown once at creation and never appears in logs. A presented key that fails validation is always rejected, never silently downgraded.

The strongest control is brevity: files self-delete within 24 hours and records are anonymized after 90 days, so there is simply less to protect.

Your rights

You can ask for access, correction, deletion, restriction or portability of your personal data, or object to its processing — one email to the address in section 1 is enough. We may ask you to re-authenticate through your sign-in provider to verify the request.

Anonymous conversion records are designed not to be linkable back to you, so rights requests can only reach data tied to your account or your current device.

Cookies and local storage

We do not run third-party advertising networks, so there are no ad cookies. We use your browser's local storage to hold a random device ID that links your recent-conversions list (anonymous use), and standard session storage for optional sign-in.

Clear this site's browser data and the device link is broken instantly — that is the documented way to detach a device.

Minors

The service is a general-purpose tool and is not directed to children. If you believe a child has used the service in a way that concerns you, write to us (section 1) and we will handle it.

Changes to this policy

If we change this policy, we update the date at the top of this page. Material changes — new processors, new purposes, longer retention — will be stated plainly here before they take effect. The English version is authoritative.

Contact us

Everything privacy-related lands in one inbox: official@biz.gentleltd.cn. We do not promise a response time, but every message is read. You can also reach the team through the contact page.