Privacy Policy

Effective 4 August 2026

This describes exactly what doc2epub collects, where it goes, and how long it stays. It is short because the service collects little.

What we collect

• Your manuscript. The .docx file you upload, the text extracted from it, and the EPUB/PDF files generated from it, along with the settings you choose (title, author, trim size, and so on).
• Account details, if you create an account: your email address, the name you give us, and a password stored as a hash by our authentication provider. If you sign in with Google we receive your email address and name from Google — never your Google password.
• Billing details, if you subscribe: your Stripe customer identifier, your subscription status, which plan you’re on and when it renews. We never see or store your card number — Stripe collects and holds payment details directly.
• Basic technical data needed to run the service: your IP address, used to apply rate limits, and ordinary server logs.

Analytics and error monitoring

We keep an eye on how the service is doing in three ways:

• Product events, recorded on our own servers: things like an upload happening, a book being built, a file being downloaded, or a payment going through. When you’re signed in these are tied to your account. We keep them to run the service and to understand what’s working and what isn’t.
• Error monitoring via Sentry. When something breaks, the error details (what failed, where in the code, which browser) are sent to Sentry so we can fix it. Your manuscript’s content is never included.
• Google Analytics, for page-view and traffic statistics — which pages get visited and roughly where visitors come from. It sets cookies to do this, so it only runs if you accept the analytics banner on your first visit — decline and it never loads. We configure it to anonymize your IP address.

There are still no advertising trackers on this site. We don’t sell or rent your data to anyone. We never use your manuscript to train AI or machine-learning models, and we don’t read it except when you ask us to, or when diagnosing and fixing a conversion problem.

Who we share your data with

We use a small number of specialist companies to run the service. They may only use your data to provide their service to us:

• Our hosting provider — runs the servers your manuscript is uploaded to and converted on.
• Google Cloud Storage — stores the manuscripts and files of books attached to an account (encrypted at rest, in a private US bucket) so they survive server moves and stay available until you delete them.
• Our authentication provider — stores your email, name and password hash, and issues the session that keeps you signed in.
• Stripe — payments and subscriptions. You enter your card details with Stripe directly and it holds them under its own privacy policy; we never see them.
• Sentry — receives error reports when something breaks, so we can fix it. Never your manuscript’s content.
• Google Analytics — receives page-view and traffic statistics, with your IP address anonymized, and only if you accepted the analytics banner.
• An AI provider — only if you press the AI chapter-detection button. We then send the structure of your manuscript for analysis, and for a document with no detectable structure that includes the manuscript text itself. If you never use that feature, none of your writing is ever sent to an AI provider.

We don’t sell your data, and we don’t share it with anyone else — except where the law requires it of us.

Where your data is held

Our providers operate in the United States, so your data is transferred and processed outside the UK and the European Economic Area. Where that applies to you, those transfers are covered by Standard Contractual Clauses or an equivalent safeguard.

Why we’re allowed to process it

• To provide the service — converting your manuscript, keeping your account, taking payment. We need this to perform our contract with you.
• To keep the service working and secure — server logs and rate-limiting by IP address. This is our legitimate interest in a service that stays available and isn’t abused.
• To meet legal obligations — keeping records of payments for as long as tax and accounting rules require.

How long we keep things

Manuscripts and generated files from signed-out sessions are deleted automatically after 1 day of inactivity. Books attached to an account are stored until you delete them — from Your books in the account menu, or by deleting the account. Deletion is permanent and removes the original upload, the extracted text and the generated files together.

Account and subscription records are kept for as long as your account exists. Stripe keeps payment records for as long as its own obligations require, independently of us.

Your choices and your rights

• Delete any individual book at any time — from the book list, or from Your books in the account menu.
• Delete your entire account from the account menu — this cancels any subscription, deletes every book you own, and removes your login and profile. It cannot be undone.

You can also ask us to give you a copy of your data or send it to another service, to correct it, to erase it, to restrict what we do with it, or to object to us processing it. Write to support@doc2epub.com and we’ll act on it — we won’t charge you and we’ll reply within a month.

If you think we’ve handled your data badly, please tell us first so we can fix it. You also have the right to complain to your data protection authority — in the UK that’s the Information Commissioner’s Office, and in the EU it’s the supervisory authority for the country you live in.

Cookies and local storage

We use your browser’s local storage to remember which books you were working on and which step you reached in each, and — if you sign in — a session token from our authentication provider. Google Analytics sets cookies to tell repeat visits from new ones — only if you accepted the analytics banner, whose answer is itself remembered in local storage. Nothing is used for advertising or for tracking you across other sites.

Children

doc2epub is not directed at children under 13 and we don’t knowingly collect their data.

Who is responsible for your data

doc2epub is the data controller for the information described above. You can reach us about anything on this page at support@doc2epub.com, and we aim to reply within a few days.