Privacy Policy

Last updated: October 2026

This policy explains what personal data ContentaSoft AB (we) collects when you visit www.contenta-converter.com or use Contenta Converter (the desktop app, its command line (CLI) and its MCP server), why, who receives it, how long we keep it and what you can do about it. We follow the EU General Data Protection Regulation (GDPR) and Swedish law. The images you convert stay on your computer unless you use one of the features below that sends them somewhere.

1. What we collect

We collect the data listed below and nothing else. Most of it comes from the website and from the app's connections to our servers.

Website visits

When you open a page, our server receives your IP address, your browser's user agent, the page address and the page you came from. After your first click, scroll or key press on a page, a small script stores the page, the referring page, your IP address and your user agent in our visit statistics. Google Analytics and Google Ads record page views and actions such as download and buy clicks. The Microsoft Advertising (Bing) tag records visits to measure Bing ads. If you arrive from a Google ad, the ad click ID (gclid) and the campaign parameters (utm_*) are kept in cookies. Section 7 lists the cookies.

Downloads and installation

When you download the installer, we record the date, your IP address, user agent, language and the page or campaign you came from, and our server reports the download to Google Analytics. We also store your IP address, the Google ad click ID and your Google Analytics ID, so that the app's first start within 48 hours can be matched to the download. The first start is then reported to Google Analytics and, if you came from a Google ad, to Google Ads, so we can measure which ads lead to installations. The installer reports its steps and errors (app version, Windows version, free disk space) without any identifier, and opens a welcome page in your browser when it finishes.

Forms and emails

When you fill in a form, we receive what you enter. The support form sends your name, email address and message to our support mailbox, with your IP address and browser user agent. The newsletter form stores your email address and language once you confirm by email (double opt-in). On a phone, the download page can email you the download link: we store your email address, language and IP address, and send you a few emails about the trial. The lost-key page resends your licence key to the email address used for the purchase. In the app, the feedback form sends your message, its category and, if you enter it, your email address. If you join the newsletter in the app to get extra clean images, the app sends your email address and its machine ID (see Usage statistics).

Purchases

Payments are handled by Stripe. Since August 2026 Stripe sells the licence as merchant of record (reseller) and handles sales tax and invoices. Stripe collects your card or other payment details; we never see or store them. Stripe sends us your name, email address, the product, the amount and the order number. We store your email address, licence key, product, amount, order number and, for subscriptions, the renewal date. We use your name only to greet you in the licence email. If you click Buy inside the app, the app adds its machine ID to the link, so the purchase can be linked to that installation.

Licence activation and checks

When you register, the app sends your email address, licence key, app version and machine ID to our licence server. At each start, a registered app sends its licence key, Windows version and app version to check that the key is valid. For each check we log the time, your IP address and its host name, the key and the email address linked to it. Your key and email address are also saved on your computer, in the app's settings folder and in the Windows registry. Trial counters, such as how many clean images you have used, stay on your computer.

Usage statistics

The app, the CLI and the MCP server send usage statistics to our server (contenta-jansoft.com). Each report carries a machine ID: a SHA-256 hash of your computer name, Windows version and Windows user name. The hash cannot be turned back into those values, but it stays the same on your computer, so reports from one computer can be linked together. Each report also contains the product, the app version, the Windows version and whether it comes from the app, the CLI or the MCP server. We receive:

• once, at installation: the app language;
• at each start: whether the app is registered, and your processor, graphics card, memory size and number of processor cores;
• wizard steps and trial events (trial started, trial ending, premium feature used);
• for each conversion: the input file types, output format, number of files, how many succeeded or failed, duration, features and effects used, and trial counts;
• conversion errors, with file names and folders replaced by placeholders;
• clicks on Buy and on update notices, and the name and version of each MCP client that connects.

Usage statistics never contain your images, file names, prompts or Gemini API key.

You can turn part of this off in Settings, Privacy: Send anonymous usage metrics. When it is off, the app, the CLI and the MCP server stop sending the per-conversion statistics, conversion errors and most click events, including MCP sessions. The installation report, the start report with hardware details, wizard steps, trial events and crash reports are still sent.

Crash reports

If the app or the CLI hits an unexpected error, it saves a report on your computer and sends it at the next start. A report contains the error type, the error message, the technical stack trace, the machine ID, the app version, the Windows version, how long the app had been running and the display mode. An error message can include a file or folder name. Crash reports are sent even when usage statistics are turned off.

Update check and downloads

The app downloads version.json from contenta-converter.com to show update notices, ai-models.json when you use an AI feature, and its tool pack from contenta-software.com when it repairs missing components. These downloads carry no machine ID, licence key or other personal data, but like any request they show your IP address to our server.

AI features (Google Gemini)

AI features (AI prompts, Restore, Colorize and AI background removal) send the image, resized to at most 4096 pixels, and your prompt directly from your computer to Google's Gemini API, with your own Gemini API key. This happens only when you run or preview an AI feature, or test your key. Google handles that data under its Gemini API terms and your Google account. We do not receive your images, prompts or results. Your API key is stored on your computer, encrypted by Windows for your user account, and is never sent to us. Background removal runs on your computer, without Gemini, when no API key is set and the local model is installed.

Uploads and sharing you start

When you upload results to an SFTP server, WordPress, Dropbox or Google Drive, the files go directly from your computer to that service, under your account. Dropbox and Google Drive use the service's own sign-in; the access tokens are saved in the app's settings file on your computer. Email sharing opens your own email program or Gmail in your browser. We do not receive these files, passwords or tokens.

Data that stays on your computer

Your images, converted files, settings, prompt library and recent folders stay on your computer. The app writes log files to %APPDATA%\ContentaConverter\logs and keeps the last 7 days. Logs can contain file names and are not sent to us.

2. Why we use it

• To sell, deliver and activate your licence, and to resend a lost key.
• To check licence keys and stop misuse of keys.
• To answer support requests and feedback.
• To find and fix crashes and conversion errors.
• To see which features, formats and versions are used, and decide what to improve.
• To measure which pages, ads and campaigns lead to downloads, installations and purchases, and to keep bots out of those numbers.
• To send the emails you asked for: licence emails, download links, the newsletter and trial emails. Each newsletter and trial email has an unsubscribe link.

We do not sell or rent personal data, and we make no automated decisions about you.

3. Legal basis

• Contract (GDPR art. 6(1)(b)): purchases, licence delivery, activation, licence checks and support.
• Legitimate interests (art. 6(1)(f)): usage statistics, crash reports, security and fraud prevention, visit and download statistics, and measuring our own advertising. Our interest is to keep the software working and to run the business. You can object at any time (section 6).
• Consent (art. 6(1)(a)): Google Analytics and Google Ads cookies for visitors from the EU/EEA, the UK and Switzerland, the newsletter and the trial emails. You can withdraw consent at any time.
• Legal obligation (art. 6(1)(c)): keeping accounting records.

4. Who receives data

We share personal data only with these recipients:

• Stripe: payments, sales tax and invoices; merchant of record for purchases since August 2026. stripe.com/privacy
• Google: Google Analytics and Google Ads on the website, and the download, installation and purchase events our server reports to measure ads. policies.google.com/privacy
• Microsoft: the Microsoft Advertising tag on the website, which measures visits from Bing ads. privacy.microsoft.com
• Google Gemini API: only when you use an AI feature, with your own API key. ai.google.dev/gemini-api/terms
• DreamHost: hosts our website, databases and outgoing email.
• YouTube: only when you click play on a video on our pages. The player loads from youtube-nocookie.com.
• The services you choose to upload or share to: your SFTP server, WordPress, Dropbox, Google Drive or your email provider.
• Authorities, when the law requires it.

Several of these recipients, including Google, Microsoft, Stripe and DreamHost, process data in the United States. These transfers rely on the safeguards the GDPR allows, such as the European Commission's standard contractual clauses.

5. How long we keep it

• Support requests and feedback: up to 2 years after the last message.
• Licence records (email address, licence key, product, order number, machine ID): for the lifetime of your licence, so you can reactivate it or recover your key.
• Payment and accounting records: 7 years, as Swedish accounting law requires.
• Newsletter and trial email addresses: until you unsubscribe. After that the address is kept only with an unsubscribed mark, so that we do not email you again, unless you ask us to delete it.
• Google Analytics data: 14 months, then deleted by Google.
• Usage statistics, crash reports, licence check logs, and visit and download records (including IP addresses): no fixed period. We keep them for statistics and security, and delete the records linked to your machine ID, IP address or email address on request.
• Data on your computer: logs are deleted after 7 days; everything else stays until you delete it. Uninstalling the app does not remove the folder %APPDATA%\ContentaConverter.

6. Your rights and controls

Under the GDPR you can ask us to:

• give you a copy of the personal data we hold about you, in a machine-readable format if you wish;
• correct data that is wrong;
• delete your data, except what the law requires us to keep;
• restrict our use of your data, or stop uses based on legitimate interests, such as usage statistics and ad measurement;
• stop uses you agreed to (withdraw consent).

You can also control data yourself:

• Cookies: visitors from the EU/EEA, the UK and Switzerland choose in the cookie banner. To change your choice, delete the cookie_consent cookie for contenta-converter.com in your browser and reload the page, or ask us. Any visitor can block or delete cookies in the browser.
• Emails: use the unsubscribe link in any newsletter or trial email.
• Usage statistics: turn off Settings, Privacy: Send anonymous usage metrics. Section 1 lists what it stops.
• AI: nothing goes to Gemini until you enter an API key and run an AI feature. Clear the key in Settings to stop.
• Cloud uploads and local data: remove Contenta Converter's access in your Dropbox or Google account settings, and delete the folder %APPDATA%\ContentaConverter to remove all app data from your computer.

To use your rights or for any privacy question, email bruno@contenta-software.com. We answer within one month. You can also complain to the Swedish Authority for Privacy Protection (IMY, www.imy.se) or to the data protection authority in your country.

7. Cookies

The website uses these cookies:

• Needed for the site to work: language (your language, 30 days), cookie_consent (your banner choice, 365 days), geo_eu (whether the banner applies to you, 1 day) and ab (page version test, 30 days).
• Set by our site to record where you came from: source and cc_utm_* (30 days), gclid (Google ad click ID, 90 days) and _ga_first_open (first visit, 365 days).
• Google Analytics and Google Ads cookies, such as _ga, _ga_* and _gcl_*. For visitors from the EU/EEA, the UK and Switzerland they are set only after you accept them in the banner. For other visitors they are on by default.
• Microsoft Advertising cookies, such as _uetsid and _uetvid, set by the Microsoft Advertising tag on every page.

Visitors outside the EU/EEA, the UK and Switzerland do not see the banner and can block or delete cookies in their browser.

8. Who is responsible

The controller of the personal data described here is ContentaSoft AB, the company that makes Contenta Converter. Write to us for any privacy question or request:

ContentaSoft AB
Kålhagsvägen 28D
907 55 Umeå
Sweden
bruno@contenta-software.com

9. Changes to this policy

When we change how we handle personal data, we update this page and the date at the top.