Privacy Policy

Last updated: November 6, 2026. This policy describes how XmlToCsv (“we”, “the service”) handles your data.

What we collect

Account data. If you create an account, we store your email address and a salted hash of your password (never the password itself). If you sign in with Google, we store the email address Google confirms for you.

Files you convert. XML files you upload or paste are stored on our server together with the settings you used, so you can preview and download results. Converted result files are generated from them on demand.

Usage records. We keep a record of each conversion (file name, size, date, row and column counts, and whether it succeeded) to enforce plan limits and to show your history.

How long files are kept

Uploaded files and their generated results are deleted automatically 72 hours after upload. Conversion records without file contents (name, size, counts) are kept while your account exists so your usage history stays accurate. You can ask us to delete your account and its records at any time via the feedback page.

Result emails

If you are signed in, a finished conversion can be emailed to your account address. If you convert as a guest and type an email address into the tool, the result is sent to that address. We do not use these addresses for marketing.

Payments

Subscriptions are processed by Paddle, which acts as merchant of record. We never see or store your card details; we receive subscription status events from Paddle and store the subscription identifiers needed to apply your plan.

Analytics

We use Google Analytics to understand aggregate usage of the public pages (for example, how many visitors the converter gets). Your uploaded files and conversion contents are never sent to analytics.

What we never do

We do not sell your data, we do not read your files for any purpose other than converting them, and we do not keep file contents beyond the 72-hour window described above.

Contact

Questions about privacy: use the feedback page and we will reply by email.