Security — How Your Files Are Protected
File lifecycle
Files are processed for the conversion job you request, then removed: result and source blobs expire on a retention schedule and a cleanup worker deletes them from storage, verifying the deletion before it marks the record done. The same lifecycle covers every job type: the file converter and the compressor share one storage pipeline, so a compressed file expires exactly like a converted one.
Malware scanning
Every upload is scanned for malware before it is accepted for conversion, and scans fail closed — a file that cannot be verified is rejected, not waved through.
Access control
Downloads are served through signed links that expire shortly after they are issued. Job results are private to the requester: nothing you convert is published or made visible to other users.
Your data is not a product
NexMedia does not sell customer file data nor mine any data from it. What the privacy policy states, the platform enforces — the security model is enforced by the code, not by policy alone.
Payments
Payments for paid plans are processed by Stripe. Your card details are entered in Stripe’s checkout and never reach our servers — the platform stores no card numbers.
The full technical detail — password hashing, token lifetimes, and where your data lives — is in the privacy policy.
Reporting a vulnerability
Found a security issue? Please describe it in detail and avoid public disclosure until a fix is available — responsible disclosure is appreciated, and reports go through the contact page.