Privacy Policy
Last updated: March 2026
Data controller
The data controller for this site is the Utilavo brand, established 2024, an independently operated web service. Privacy and editorial enquiries: [email protected]. Full business identity disclosure on the About page.
Overview
Utilavo is designed to respect your privacy. We do not require you to create an account, provide personal information, or accept tracking to use any of our tools. This policy describes what limited information we may handle and how.
Our privacy approach is built on a simple principle: process files locally in your browser whenever technically possible, and when server processing is required, delete everything immediately after delivering the result.
Information we collect
We do not collect personal information such as your name, email address, or any account data — because we do not offer accounts.
Like any web server, our infrastructure may record standard server logs including IP addresses, request timestamps, and browser type. These logs are used solely for security monitoring, rate-limit enforcement, and operational diagnostics. They are not linked to your identity and are not shared with third parties for marketing or analytics purposes.
We do not collect any information about the content of files you process. File names, file contents, and processing parameters are not logged, analyzed, or stored beyond what is needed for the immediate processing request.
How we process your files
Browser-based processing
Many Utilavo tools run entirely within your browser using JavaScript and WebAssembly. Your files are read locally by your device and never transmitted to our servers. We have no access to file content processed by these tools. This includes:
- PDF merge, split, rotate, reorder, page numbers, and watermark
- Image-to-PDF and PDF-to-image conversion
- All developer tools (JSON formatter, Base64, URL encoder, hash generator, regex tester, color converter, and others)
Server-based processing
Some tools require server-side processing because they depend on specialized software that cannot run in a browser. When you use a server-based tool, the following applies to every request:
- Your file is uploaded over an encrypted HTTPS connection.
- It is written to an isolated temporary location on our server.
- The processed result is streamed back to your browser.
- Both the original and result files are deleted immediately after the response completes.
- File content is never logged, stored beyond processing, analyzed, or shared.
- Each request is processed in isolation — files from different users are never co-mingled.
Server-based tools include:
- Image tools: compress, convert, resize, crop, rotate, and watermark
- Document conversions: PDF to Word, PDF to Excel, PDF to PowerPoint, Word to PDF, Excel to PDF, PowerPoint to PDF, and HTML to PDF
- PDF operations: compress, convert to PDF/A, protect, unlock, and repair
Data retention
Uploaded files: Deleted immediately after processing completes. Files are never written to permanent storage, backed up, or retained for any duration beyond the active request.
Server logs: Standard access logs (IP address, timestamp, request path, status code) may be retained for a limited period for security monitoring and abuse prevention. These logs do not contain file content or file names.
Browser-processed files: Files handled by browser-based tools never leave your device and are not subject to any retention by Utilavo.
Security measures
We employ the following measures to protect your data during server-based processing:
- All data in transit is encrypted via HTTPS (TLS).
- Server-side processing runs in isolated, non-root containers with minimal system privileges.
- Temporary files are written to ephemeral storage and deleted immediately after use.
- Rate limiting is enforced on all API endpoints to prevent abuse and ensure fair access.
- A maximum file size limit of 50 MB is enforced on all uploads.
While we take reasonable steps to safeguard your files during processing, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.
Cookies and tracking
Utilavo does not set first-party tracking cookies or use behavioral analytics services. We may use technically necessary cookies for basic site functionality if required. We do not participate in cross-site tracking.
We use Google Analytics to collect anonymous, aggregated usage statistics (such as page views and general geographic region). Google Analytics may set cookies on your browser. This data helps us understand which tools are most used and improve the service. No personally identifiable information is collected through analytics.
Advertising
Utilavo displays advertisements through Google AdSense to support the cost of providing free tools. Google AdSense may use cookies and similar technologies to serve ads based on your prior visits to this or other websites.
You can opt out of personalized advertising by visiting Google Ads Settings or by using the DAA opt-out tool. Opting out does not remove ads — it prevents them from being personalized to your browsing history.
Advertising does not affect how your files are processed. Ad networks have no access to the files you upload or the results you download.
Third-party services
Utilavo may be hosted on third-party cloud infrastructure. Hosting providers operate their own data processing agreements and privacy practices. We select providers that meet industry standards for data protection.
Beyond hosting, analytics, and advertising as described above, we do not integrate third-party social media trackers, data brokers, or additional analytics providers into our site.
Do Not Track
Utilavo does not engage in behavioral tracking of individual users. Because we do not track users across sites or sessions, there is no tracking behavior to alter in response to a Do Not Track (DNT) browser signal. Third-party services embedded on our site (such as Google Analytics and AdSense) may handle DNT signals according to their own policies.
International users
Utilavo is accessible worldwide. If you access the Service from outside the country where our servers are located, your data may be transferred across borders as part of normal internet routing and server-based file processing.
Because we do not collect personal data, create user profiles, or store files beyond immediate processing, data subject rights under regulations such as the GDPR (EU), UK GDPR, or CCPA (California) are largely inapplicable. However, if you have any privacy-related concerns or wish to exercise a right you believe applies, please contact us and we will respond promptly.
Children's privacy
Utilavo is not directed at children under 13 years of age. We do not knowingly collect any information from children. If you believe a child has submitted information to us, please contact us and we will address it promptly.
Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects when changes were last made. Continued use of Utilavo after any update constitutes acceptance of the revised policy. We encourage you to review this page periodically.
Contact
Questions or concerns about this Privacy Policy? Contact us at [email protected]. You can also review our Terms of Service for information about how the Service may be used.