Privacy Policy

Who we are

RPP Converter is operated by ITENREGALIA, 5 avenue Shakespeare, 06000 Nice, France (SIREN 817 713 092, VAT FR73817713092). We are the data controller for the personal data described on this page.

For anything relating to your data, write to support@rppconverter.com.

The files you upload

Your uploaded OMF sessions and the converted RPP projects are kept for a maximum of 24 hours, then deleted automatically. An automated job runs every hour and removes everything past that window, whether or not you downloaded the result.

We do not listen to, inspect, share or sell the audio you upload, and we never use it to train anything. It is processed for one purpose only: producing the converted project you asked for.

What we collect

We keep the data needed to run the service, and nothing else:

• Account data: your email address and an encrypted (hashed) password.
• Phone number and its verification date, used to confirm you are a real person and to enforce the one-free-conversion-per-person rule.
• Conversion records: file name, size, status and timestamps.
• Payment records: what you bought, when, and the payment reference. Card details are entered on Stripe's own checkout page and never reach us.
• Technical logs: IP address, request and error logs, kept for security and debugging.

Why we process it

Each purpose has a legal basis under the GDPR:

• Performing our contract with you: running conversions, managing your account, delivering what you paid for.
• Legal obligation: keeping invoices and accounting records.
• Legitimate interest: preventing abuse and fraud, keeping the service secure and available.

Who we share it with

We never sell your data and we run no advertising. We use a small number of service providers, each processing data strictly on our instructions:

• Stripe, for payments and invoicing.
• Mailjet, for transactional email (account and conversion notifications).
• Twilio, for the phone verification code.
• Our hosting provider, for the servers running the service.

How long we keep it

• Uploaded and converted files: 24 hours maximum, deleted automatically.
• Account data: for as long as your account exists.
• Invoices and accounting records: 10 years, as French law requires.
• Technical logs: a short rolling period, then discarded.

Your rights, and how to delete your data

You can ask us to delete your account and the personal data attached to it at any time: email support@rppconverter.com from your account address and we will take care of it. Your files are already gone within 24 hours, automatically. We may have to keep invoices, because accounting law requires it.

You also have the right to access your data, correct it, object to its processing, ask us to restrict it, and receive a copy in a portable format. We answer within one month.

If you think we have handled your data badly, you can complain to the CNIL, the French data protection authority (www.cnil.fr).

Cookies

We use strictly necessary cookies only: one to keep you logged in, one for security (CSRF protection). There is no analytics, no advertising and no third-party tracking on this site, which is why you are not being asked to accept anything.

Security and transfers

Traffic is encrypted in transit, passwords are stored hashed, and access to production data is restricted. No system is perfect, so we also keep the amount of data we hold to a minimum, and delete files quickly.

Some of our providers may process data outside the European Union. Where that happens, it is covered by the European Commission's standard contractual clauses.

Changes

If this policy changes, the date at the top of the page changes with it. Significant changes will be announced by email.