Privacy Policy

Last updated: 28 September 2026

This Privacy Policy explains how personal data is collected, used and protected when you use ConvertAnyModel ("Service"). The data controller is GRADINGMASTER LTD, a company registered in England and Wales under company number 17438283, with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX ("we", "us"). Questions: support@gradingmaster.com.

1. Your models stay on your device

Models you open in ConvertAnyModel are read, viewed, edited and converted inside your web browser (or by the optional desktop companion on your own computer). We do not receive, upload or store your model files or their contents. When you close the page, the model is cleared from memory.

2. Data we collect

• Account data: your email address and name. If you sign in with Google, we receive your name, email address and Google account identifier from Google. If you use a password, it is stored only as a secure one-way hash by our authentication provider.
• Subscription data: when you subscribe, Paddle collects your name, email, country and payment details. We receive your name, email, subscription status and order information, but not your full payment card details.
• Usage data: the number of exports on your account and the export format, used to apply the free export and plan limits. We do not record the model or file names.
• Technical data: IP address and basic request information in server logs, used for security and to prevent abuse.
• Support data: what you send us when you contact support.

3. How we use your data

• to create and secure your account and sign you in;
• to provide Pro features, apply the free export, and manage your subscription;
• to send essential service emails such as sign-in, receipts and renewal notices;
• to provide support, prevent abuse and keep the Service secure; and
• to comply with legal obligations.

We do not use your data for advertising and we do not sell it. Product news is only sent if you opt in, and you can unsubscribe at any time.

4. Legal bases (UK, EU and similar regimes)

We rely on performance of a contract (to provide your account and subscription), legitimate interests (to secure the Service and prevent abuse), consent (for optional marketing, which you can withdraw at any time), and legal obligation.

5. Service providers

We share personal data only as needed with providers who help us run the Service: Paddle (payments, tax and subscriptions, as Merchant of Record), Supabase (account sign-in and database), Google (if you choose Google sign-in), Cloudflare (website hosting and security), and a transactional email provider for service emails. These providers process data under their own privacy terms. We may also disclose data where required by law or in connection with a business transfer.

6. Cookies

We use only cookies and local storage that are strictly necessary to keep you signed in and remember your preferences. We do not use advertising cookies.

7. International transfers

We and our providers may process your data in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards as required by applicable law.

8. Retention

We keep account data while your account is open. If you delete your account, we delete or anonymise your personal data within 30 days, except for records we must keep for tax and accounting, which Paddle and we retain as the law requires.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive it in a portable format, and to withdraw consent. You can delete your account from your account page, or email support@gradingmaster.com. You may also complain to your local data protection authority (in the UK, the Information Commissioner's Office).

10. Security

We use reasonable technical and organisational measures to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

The Service is intended for professional use and is not directed to children. We do not knowingly collect personal data from anyone under 16.

12. Changes

We may update this Policy and will post the new version with a new "Last updated" date.