Privacy Policy

1. Your Documents Never Leave Your Computer

IDML Converter performs the IDML → DOCX conversion 100% locally on your computer. We do not have access to the contents of your documents, and nothing you convert is uploaded to our servers.

Specifically, the following are NOT collected and NOT uploaded:

• Document contents (text, structure, styles)
• IDML files
• Converted DOCX files
• Images and linked assets, including PSD and AI files

2. Information We Collect

To operate licenses, subscriptions and your account, our license server and portal process the following information:

• Email address — to create your portal account, identify your license and send transactional emails (purchase instructions, license confirmations, password reset)
• License token identifier — we store a one-way hash of your license token and a short display hint, never the token itself
• Device identifier — a locally derived, salted hash of your computer's machine identifier, used to enforce the device limit; it does not identify you personally and cannot be reversed into the original identifier
• License validation information — activation and validation timestamps, device name you entered (optional), application version and platform
• Page usage count — the number of pages converted, used for trial and plan limits
• Subscription status — plan, status (active, past due, canceled, paused), billing period and renewal dates, as reported by our payment provider

Payment information (card details, billing address, tax details) is collected and processed by our payment provider, Paddle. We receive only a customer identifier, your email address, transaction and subscription identifiers and status — never your full card number.

When you contact us by email we keep the correspondence in order to respond.

3. How We Use Information

• To activate, validate and manage your license and devices
• To keep your license in sync with your subscription (renewals, cancellations, payment failures, refunds)
• To send transactional emails: purchase instructions, email confirmation, password reset, renewal and license notices
• To enforce trial limits, device limits and plan limits, and to prevent fraud and abuse
• To provide customer support
• To comply with legal, tax and accounting obligations

We do not sell personal data, and we do not use it for third-party advertising.

4. Legal Bases

Where the GDPR or similar laws apply, we process personal data to perform our contract with you (license and subscription), for our legitimate interests (security, abuse prevention, product operation), to comply with legal obligations, and with your consent where required. Where the Korean Personal Information Protection Act applies, we process personal data as necessary to provide the service you requested and as permitted by that Act.

5. Service Providers

We rely on the following providers, each of which processes data only to provide its service to us:

• Paddle.com Market Ltd — merchant of record: checkout, payment processing, invoicing, tax and subscription billing
• Supabase — hosted database and authentication for the license server and portal
• Vercel — hosting for the website and license portal
• NAVER WORKS — outgoing email (transactional messages)

These providers may store data outside your country, including in the United States and the European Union. Where required, transfers are protected by standard contractual clauses or equivalent safeguards.

6. Retention

Account and license records are kept for as long as your account or license exists and for a reasonable period afterwards to handle support, disputes and legal obligations. Usage counts and validation logs are kept for the duration of the license and up to 12 months thereafter. Transaction records are kept as long as required by tax and accounting law.

You can ask us to delete your portal account and associated personal data; we will do so unless we must retain some records by law.

7. Security

License tokens are stored only as one-way hashes. Device identifiers are salted hashes. Data is transmitted over TLS. Access to production systems is restricted to authorized personnel.

8. Your Rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to restrict or object to processing, and to withdraw consent. To exercise these rights, email robin@docsheim.com. You may also lodge a complaint with your local data protection authority.

9. Cookies

The license portal uses strictly necessary cookies to keep you signed in. The website does not use advertising or cross-site tracking cookies. Paddle's checkout may set its own cookies, governed by Paddle's privacy policy.

10. Children

Our services are intended for adults and businesses and are not directed at children under 14 (or the applicable age in your country).

11. Changes

We may update this Privacy Policy. Material changes will be reflected by the "Last Updated" date and notified where required by law.

12. Contact

Docsheim — 2nd Complex BD, Barasan Ro 76, UIWANG City, South Korea — Email: robin@docsheim.com