Privacy Policy
Last updated: July 14, 2026. This Privacy Policy explains how Invoice Converter, operated by CV Studio and Aperp Technologies India Pvt Ltd, collects, uses, and protects your information when you use our website at www.xml-babel-converter.com.
Data Controller
The data controller for this website is Aperp Technologies India Pvt Ltd, operating in partnership with CV Studio. For any privacy-related questions, contact us through the contact page.
Information We Collect
Information You Provide
- Account Information: When you register, we collect your email address and chosen password to create and manage your account.
- Contact Information: When you use the contact form, we collect the information you submit (name, email, message) to respond to your inquiry.
- Invoice Files: When you use the conversion tool, you upload invoice files (XML, PDF) for processing. These files may contain business-sensitive data including company names, VAT numbers, addresses, bank details, line item descriptions, and financial amounts.
Information Collected Automatically
- Usage Data: We collect standard web server logs including IP addresses, browser type, operating system, referring URLs, pages visited, and timestamps.
- Cookies: We use cookies for session management, authentication, and analytics. See our Cookie Policy for details.
How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide invoice conversion services | Performance of contract / Legitimate interest |
| Create and manage user accounts | Performance of contract |
| Respond to support and contact requests | Legitimate interest |
| Improve the service and fix issues | Legitimate interest |
| Display relevant advertisements (Google AdSense) | Consent |
| Prevent abuse and ensure security | Legitimate interest |
Invoice File Data Handling
Invoice files uploaded for conversion are processed on our servers. We take the following approach to invoice data:
- Temporary Processing: Uploaded invoice files are processed for conversion and the converted output is made available for download.
- Limited Retention: Converted documents are stored temporarily to allow preview and download. They are automatically deleted after the session or within a short retention period.
- No Sharing: Invoice file contents are not shared with third parties, used for advertising, or analyzed beyond what is necessary for the conversion process.
- User Responsibility: Users should only upload invoice files they are authorized to process. We recommend reviewing converted output before using it for legal, tax, or accounting purposes.
Third-Party Services
We use the following third-party services that may process your data:
| Service | Provider | Purpose | Privacy Policy |
|---|---|---|---|
| Google AdSense | Google LLC | Display advertisements on the website | Google Privacy Policy |
| Google reCAPTCHA v3 | Google LLC | Protect forms from spam and abuse | Google Privacy Policy |
Data Retention
- Account data: Retained for as long as your account is active. You can request deletion at any time.
- Conversion files: Temporarily stored and automatically deleted after download or within a short retention window.
- Server logs: Retained for up to 90 days for security and troubleshooting purposes.
- Contact form submissions: Retained as long as needed to address your inquiry.
Your Rights Under GDPR
If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data (subject to legal obligations).
- Right to Restrict Processing: Request limitation of how we process your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interest.
- Right to Withdraw Consent: Withdraw consent for advertising cookies at any time.
To exercise any of these rights, contact us through the contact page. We will respond within 30 days.
Data Security
We implement appropriate technical and organizational measures to protect your data, including HTTPS encryption for all data in transit, secure server infrastructure, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
International Data Transfers
Our services are operated from servers that may be located outside the EEA. When data is transferred internationally, we ensure appropriate safeguards are in place, including standard contractual clauses where applicable.
Children's Privacy
Our service is designed for business use and is not intended for individuals under the age of 16. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be posted on this page with an updated revision date. Continued use of the service after changes constitutes acceptance of the updated policy.
Contact Us About Privacy
If you have questions about this Privacy Policy or how your data is handled, please use the contact page or email us at the address provided there.