Privacy Policy

1. Introduction

Welcome to mbPDF ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience when using our document conversion service. This Privacy Policy explains how we handle your information when you use mbPDF.

mbPDF is a student project created in Casablanca, Morocco. We operate with the principle that privacy should be the default, not an afterthought.

2. Information We Collect

We collect minimal information:

• Files you upload: Temporarily stored only for conversion, automatically deleted after 10 minutes.
• Conversion metadata: Job IDs and timestamps (stored temporarily, deleted after 10 minutes).
• Technical data: Basic server logs (IP address, browser type) for security and troubleshooting, retained for 30 days.

We do NOT collect: Names, email addresses, account information, payment details, or any personal identification.

3. How We Use Your Information

• File conversion: To process your document conversion request.
• Service improvement: Anonymous usage statistics to improve our service.
• Security: Server logs to detect and prevent abuse.

4. Data Storage and Deletion

5. Third-Party Services

We use the following third-party services, all under free tiers:

• •
  Oracle Cloud - Hosts our backend servers (EU region, Casablanca-1)
• •
  Supabase - Database and file storage (EU region)
• •
  Vercel - Hosts our frontend (edge network)

Each service has its own privacy policy and data processing agreements. All data is processed in accordance with GDPR principles.

6. Cookies and Tracking

mbPDF uses no tracking cookies, analytics scripts, or advertising trackers. We believe in a web without surveillance. The only cookies used are strictly functional (for maintaining your session during file conversion).

7. Data Security

We implement appropriate technical measures to protect your data:

• 256-bit SSL/TLS encryption for all data transfers
• Automatic file deletion after 10 minutes
• Regular security updates
• Firewall protection
• Minimal data collection principle

8. Your Rights (GDPR & Moroccan Law)

As a user in Morocco and under GDPR for European users, you have the right to:

• Access: Request information about your data (though we store almost none)
• Deletion: Request deletion of any data (though it's auto-deleted anyway)
• Object: Object to data processing
• Lodge a complaint: With your local data protection authority

To exercise these rights, contact us at contact@mbpdf.com. Given our minimal data retention, we may not have any data to provide.

9. Children's Privacy

Our service is intended for general use and does not knowingly collect information from children under 13. If you believe a child has provided us with personal information, contact us and we'll delete it.

10. International Data Transfers

Our servers are located in the EU (Oracle Cloud Casablanca-1 region). By using mbPDF, you acknowledge that your data may be transferred to and processed in Morocco and the EU.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page with an updated effective date. Your continued use of mbPDF constitutes acceptance of the updated policy.

12. Contact Information