Privacy Policy
Effective August 20, 2026 · Last updated August 21, 2026
Our core privacy design is simple: financial file contents stay in your browser when you use the file tools. Limited website, analytics, account, and communication data may still be processed as explained below.
What does this Privacy Policy cover?
This Privacy Policy explains how ACH File Converter handles information when you visit achfileconverter.com, use its browser-based tools, contact us, or use an optional account feature. It does not govern a bank, ACH operator, linked website, or other third party.
Are ACH and NACHA file contents uploaded?
The core ACH, NACHA, CSV, and Excel tools are designed to parse and transform file contents locally in your browser. Original and generated financial-file contents are not intentionally transmitted to our application servers by those tools.
Do not send live files, account numbers, routing details, receiver names, company identifiers, amounts, or addenda through email, feedback, URLs, or support messages. Browser extensions, managed devices, networks, and third-party software are outside our control.
What information may we collect?
Depending on enabled features, we may process the following categories:
- Technical and usage information: page path, event type, timestamps, referrer, UTM campaign values, session or visitor identifiers, browser/device information, and IP-derived server or security logs.
- Communications: your email address and the information you choose to send when contacting us.
- Account information: identifiers and profile information if account functionality is enabled and you create an account.
- Local browser data: preferences, session identifiers, and conversion state stored on your device.
We do not intend to collect ACH file contents through analytics events. Please report any behavior that appears inconsistent with this statement.
How do we use information?
- Provide, maintain, secure, and troubleshoot the website.
- Understand aggregate usage and improve tools and documentation.
- Respond to support, privacy, and correction requests.
- Detect abuse, protect system integrity, and comply with legal obligations.
- Maintain records reasonably necessary to establish or defend legal claims.
Which cookies and browser storage may be used?
The site may use localStorage, sessionStorage, and cookies for essential preferences, session continuity, security, analytics identifiers, and attribution. A sanitized utm_source value may be stored for up to 30 days. Session identifiers generally expire with the browser session unless a longer period is stated by the relevant feature.
Optional analytics providers may include Google Analytics, Microsoft Clarity, Plausible, or Vercel Analytics when configured. Their processing is governed by their respective notices. Non-essential analytics should not be enabled in jurisdictions requiring consent until an appropriate consent mechanism is active.
When is information disclosed?
Information may be disclosed to hosting, infrastructure, analytics, security, authentication, and communication service providers that support the website; when required by law or valid legal process; to protect users, the service, or others; or as part of a merger, financing, acquisition, or transfer of the service.
We do not sell ACH file contents or use them for advertising. We do not currently sell personal information for money. If practices materially change, this Policy and any legally required choice mechanism must be updated before the change.
How long is information retained?
Local file contents remain under your browser and device controls. Server-side usage, security, account, or communication records are retained only for as long as reasonably necessary for the purposes described above, legal obligations, dispute resolution, and security. Retention periods vary by record type. You can clear browser storage through your browser settings.
How is information protected?
We use reasonable administrative and technical safeguards appropriate to the service, including HTTPS in production and limiting the file tools to local processing. No internet service, device, or storage method is completely secure. You are responsible for protecting your device, browser profile, downloads, and copies of financial files.
What privacy choices and rights may apply?
Depending on where you live and applicable law, you may have rights to request access, correction, deletion, portability, or information about disclosures, and to object to or opt out of certain processing. California law may also provide rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive non-discriminatory treatment when the law applies.
Send requests to hello@achfileconverter.com. We may need to verify your request and may retain information when an exception applies. We do not discriminate for exercising an applicable privacy right.
Is the service intended for children?
No. ACH File Converter is a general business utility and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child submitted personal information.
Can this Policy change?
Yes. We may update this Policy to reflect product, legal, or operational changes. The “Last updated” date will change when revisions are published. Material changes may receive additional notice where required.
How can you contact us?
Email hello@achfileconverter.com or use the Contact page. Do not include banking data.
