Privacy Policy

Last updated: July 24, 2026

1. Who is responsible

The data controller is bnbff. Privacy questions: [email protected].

2. What we process

• The PDF you upload and the Excel file we generate from it — processed solely to produce your conversion.
• Payment — handled by Stripe. We receive a payment confirmation and reference, never your card number. See Stripe's own privacy policy.
• Analytics — we use PostHog (US) to understand how the site is used and improve it. It sets analytics cookies and may record masked session replays: all on-screen text and inputs are masked, and your uploaded document, its preview, and its filename are never recorded. We honour Do Not Track — if your browser sends it, we load no analytics and track nothing. We run no advertising and never sell your data. We also keep minimal operational server logs needed to run and secure the service.

3. Retention — how long we keep files

Your uploaded PDF and the generated Excel file are automatically and permanently deleted within one hour of upload. We do not keep copies, and we do not use the contents of your files for any purpose other than performing your conversion.

4. Sharing

We do not sell your data. Files are processed on our own infrastructure. Payment data is shared only with Stripe to take payment. The application is hosted on infrastructure provided by Railway (railway.com), located in the United States.

5. Your rights

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you may request access to, or correction of, the personal information we hold about you, withdraw consent, or complain to the Office of the Privacy Commissioner of Canada. Because uploaded and generated files are permanently deleted within one hour, they are usually already gone before such a request could be actioned. To make a request, email [email protected].

6. Security

Uploads and downloads are served over HTTPS. Access to full conversions requires a confirmed payment tied to your specific job.

7. Changes

We may update this policy; the "last updated" date reflects the current version.