Privacy Policy

One Big File ('we', 'us', or 'our') is an online file-processing platform that provides PDF, image, document, OCR, and productivity tools directly in the browser. This Privacy Policy explains how we handle your personal data when you use our website and services.

For privacy-related enquiries, contact us at onebigfile@gmail.com.

Usage data. When you use our tools we may collect anonymous identifiers such as a session token, the tool used, approximate geographic region (country level), browser type, and device type. We do not link this data to your identity unless you are signed in.

Account data. If you create an account we store your email address, hashed password, account creation date, subscription status, and API key metadata.

Uploaded files. Files you upload are stored temporarily for processing only. We do not read, analyse, index, or share the contents of your files beyond what is necessary to perform the requested conversion or processing task.

Payment data. Payments are processed by Stripe. We receive confirmation of successful transactions and your subscription status but never see or store your full card number, CVV, or bank details. Stripe's privacy policy governs their handling of payment data.

Support communications. If you contact us by email we keep a record of that correspondence to resolve your query and improve the service.

To provide the service — processing uploaded files and returning results to you.

To manage your account — authenticating sign-ins, enforcing usage limits, and sending transactional emails such as receipts and password resets.

To improve the platform — aggregate, anonymised usage statistics help us understand which tools are most useful and where errors occur.

To prevent abuse — request rate limiting, file validation, and security monitoring protect the platform and other users.

We do not sell your personal data to third parties. We do not use your uploaded files to train machine-learning models.

Uploaded files and processed outputs are stored temporarily in an isolated environment. Files are automatically deleted no later than 60 minutes after upload unless an earlier deletion is triggered by a completed download or explicit cancellation.

Download links are short-lived tokens. Once a token expires the associated file is no longer accessible.

We do not make your uploaded files publicly accessible, share them with other users, or retain them after the deletion window.

Premium and Business subscriptions are billed through Stripe. When you subscribe, Stripe stores your payment method and handles all recurring charges. We store only your subscription tier, billing period, and renewal date.

You can update or cancel your subscription at any time from your account settings or by contacting onebigfile@gmail.com. Cancellations take effect at the end of the current billing period.

Refund requests are handled on a case-by-case basis. Contact us within 7 days of a charge if you believe a billing error occurred.

We may use privacy-focused analytics to measure page visits, tool usage, and error rates. Analytics data is aggregated and does not include file contents or personally identifiable information.

We may serve ads through third-party ad networks. Ad networks may use cookies to measure ad performance. You can opt out of personalised advertising through your browser or device settings.

Our service relies on infrastructure providers (cloud hosting, CDN, database) who process data on our behalf under data-processing agreements.

Depending on your location you may have the following rights: access the personal data we hold about you; request correction of inaccurate data; request deletion of your account and associated personal data; object to certain processing; request a portable copy of your data.

To exercise any of these rights, email onebigfile@gmail.com from the address associated with your account. We will respond within 30 days.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority.

Our infrastructure is primarily hosted in the United States. If you access One Big File from outside the United States, your data may be transferred to and processed in the US.

We take reasonable steps to ensure that any cross-border transfers comply with applicable data-protection law, including the use of standard contractual clauses where required.

One Big File is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact onebigfile@gmail.com and we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes we will update the 'Last updated' date at the top of this page and, where appropriate, notify you by email.

Your continued use of the service after a policy update constitutes acceptance of the revised policy.