GDPR Compliance

Last updated: June 2026

How ConvertFlow aligns with the EU General Data Protection Regulation.

Lawful basis

We process personal data on the basis of consent, contract performance (providing the service you request), and legitimate interests (security and fraud prevention).

Data subject rights

You have the right to access, rectification, erasure, restriction, portability and objection. We respond to verified requests within statutory timeframes.

Data minimization & retention

We collect only what is necessary and delete uploaded files automatically (guests 1h, users 24h). Account data is retained only while your account is active.