Security and compliance at CoolUtils.

Q: How do I report a security concern or vulnerability?

Email us at support@coolutils.com or use our Contact page . Please describe the issue and how to reproduce it, and we will follow up. We answer support requests from real people, usually the same day.

Before you hand a file to any converter — a resume, a bank statement, a scanned ID, a contract — you deserve a straight answer about where it goes and what happens to it. Here is ours.

In short: CoolUtils gives you two ways to convert, and only one ever touches our servers. Our desktop apps process files locally and never upload them. Our online converter uses encrypted SSL/TLS transfers, processes each file in isolation, and deletes it automatically within 24 hours. Pick the path that matches how sensitive your data is.

Two ways to convert
Online security
Desktop security
Data & deletion
Compliance
Our practices
FAQ

Two ways to convert — you choose

The single most important thing to understand about CoolUtils: whether your file leaves your computer is entirely your choice.

Nothing leaves your device

Desktop apps

Total & Coolutils desktop converters run entirely on your own computer. Files are processed locally and are never uploaded, transmitted, or stored on our servers — not for conversion, not for storage, not for anything. They work fully offline. Best for confidential, regulated, or high-volume work.

Encrypted · auto-deleted

Online converter

Need a quick one-off conversion in the browser? Your file is sent over an encrypted connection, processed in an isolated environment, and deleted automatically within 24 hours. Convenient for occasional, non-sensitive files with no software to install.

How we protect your online conversions

When you use the browser-based converter, here is exactly what happens to your data.

Encrypted transfer

Every file you upload or download travels over an encrypted SSL/TLS (HTTPS) connection, protecting it from interception in transit.

Isolated processing

Each file is handled in its own separate environment, kept apart from other users’ files and data throughout the conversion.

Automatic deletion

Your uploaded file and its converted result are removed from our servers automatically within 24 hours — no manual step needed.

Never shared

Files are not read by our staff and are never sold, indexed, shared with third parties, or reused for any other purpose.

Desktop software: your files stay with you

Local processing is the CoolUtils advantage that cloud-only converters cannot match — there is simply no upload to secure.

Processed locally

The entire conversion happens on your own machine, using your own CPU and disk. Your files never move.

Nothing is uploaded

No file, and no metadata about it, is ever transmitted to CoolUtils. There is no cloud copy to leak or subpoena.

Perpetual license

Each app is a one-time, perpetual license — no ongoing account, subscription, or cloud dependency tied to your data.

Works fully offline

Run conversions on an air-gapped or restricted network. Ideal for legal, medical, and government workflows.

Data handling, retention & deletion

Online files: deleted automatically within 24 hours of conversion; not read by staff; never retained, indexed, shared, or reused.
Desktop files: we never receive them in the first place — there is nothing on our side to store or delete.
Account data: only what is needed to fulfil your order and support you; kept only as long as necessary or as law requires.
Your rights: access, correction, and deletion requests are honoured — see the Privacy Policy for how to exercise them.

Compliance & privacy

GDPR — we are committed to complying with the EU General Data Protection Regulation for users in the European Union.
US privacy laws — CCPA/CPRA (California) plus the state privacy acts of Virginia, Colorado, Utah, and Connecticut.
PCI-DSS payments — we never store card details; payments run through certified processors (FastSpring, PayPro Global, PayPal).
HTTPS everywhere — the whole site and every online conversion is served over encrypted connections.

Organizational practices

Technology is only half of security. We back it with day-to-day operational discipline.

Access controls that limit who on our team can reach production systems.
Security awareness training for staff who handle customer requests and infrastructure.
A defined incident-response process for identifying, containing, and communicating about security events.
Human support — real people answer your questions, so a security concern reaches someone who can act on it.

Security & Compliance FAQ ▼

Is it safe to upload my file to the online converter?

Yes. Every file you send through our online converter travels over an encrypted SSL/TLS (HTTPS) connection and is processed in an isolated environment, kept apart from other users’ files. Your files are not read by our staff. If your data is highly sensitive, you can skip uploading entirely and use one of our desktop converters, which run locally on your own computer.

What happens to my file after it is converted?

Both the file you upload and the converted result are deleted automatically from our servers within 24 hours of the conversion. We do not retain, index, share, sell, or reuse your files for any other purpose. See our Privacy Policy for full detail on data handling.

Can I convert files without uploading them anywhere?

Yes. Our desktop converters run entirely on your computer — your files are processed locally and never uploaded, transmitted, or stored on CoolUtils servers. They also work fully offline, which makes them a good fit for confidential documents, regulated data, or restricted networks.

Is CoolUtils GDPR compliant?

We are committed to complying with the General Data Protection Regulation (GDPR) for users in the European Union, and with US privacy laws including the CCPA/CPRA and the state privacy acts of Virginia, Colorado, Utah, and Connecticut. Details on what we collect and your rights are in our Privacy Policy.

Does CoolUtils hold any security certifications?

CoolUtils does not currently advertise a formal ISO 27001 or SOC 2 certification. What we do provide is concrete: encrypted SSL/TLS transfers, automatic deletion of uploaded files within 24 hours, GDPR and US-state privacy compliance, and payments handled by PCI-DSS-certified processors. For the highest-sensitivity data, our desktop apps remove the question entirely by keeping files on your own machine.

Does CoolUtils store my payment or card details?

No. We never store or collect your payment card details. Payments are processed by our PCI-DSS-compliant partners — FastSpring, PayPro Global, and PayPal — who handle card data directly under their own certified security standards.

How do I report a security concern or vulnerability?

Email us at [email protected] or use our Contact page. Please describe the issue and how to reproduce it, and we will follow up. We answer support requests from real people, usually the same day.

Privacy Policy What we collect, how we use it, and your rights under GDPR and US law.
Terms & Conditions The agreement that governs your use of our software and site.
About Us Who we are — converting files for businesses and governments since 2003.
Support Guides, FAQs, and help for every CoolUtils product.
Contact Reach a real person by email, form, or phone.

Report a security concern

Found a vulnerability or have a question about your data? Email [email protected] or use our contact form. We answer same day.