Privacy Policy

Tools identified as local process content in your browser without uploading it to perform the operation. Examples include text, calculations, data formatting and several PDF operations. Loading the page, libraries, fonts and models may generate network requests containing an IP address and technical data. Language, theme and consent preferences may be saved in your browser. Local processing does not mean browsing without a connection or technical data.

Some PDF operations, background removal, video processing and server-mode OCR send content over HTTPS to the service infrastructure. Requests pass through Supabase and/or workers hosted on Google Cloud Run, depending on the operation. The worker uses memory and temporary disk files and attempts to remove them when a task ends, including error paths. Failures can prevent cleanup: we do not guarantee immediate deletion or RAM-only processing. PDF passwords supplied for an operation are also handled by the server. Assess this workflow before sending confidential material.

OCR: server mode sends the image to Google Cloud Vision. The local OCR alternative processes the image on your device and may download models.

Automatic subtitles: extracted audio may be sent to Groq when that provider is configured in the backend. In other configurations, transcription runs on the worker. External providers retain data according to their policies and settings, not an immediate-deletion promise by UtilNexo.

Video editor: inputs and results use a private Supabase Storage bucket. Job access expires after 1 hour; previously issued result links have their own validity. Access expiration does not mean file deletion. This version does not guarantee a maximum automatic deletion period. To request a deletion review, contact us with the job identifier, without sharing access tokens.

Download tools send the supplied URL and format options to our server, which accesses the source platform. Only use content and access methods authorized by the rights holders and the platform. A public URL does not imply unrestricted permission. External services receive the data required for requests and apply their own terms.

Contact forms collect name, email, subject and message, forwarded through Supabase and Resend to support. These data are used to handle your request. Do not send passwords or sensitive files through the form. Messages may remain in the support mailbox and provider systems; request deletion through the contact page.

Hosting and backend services may log IP addresses, time, route, status and technical details for security, diagnostics and abuse prevention. Retention depends on service configuration; we do not claim a uniform 30-day period. Public tools do not require an account or subscription. Former account holders can request access, correction or deletion of their records.

Google Analytics 4 loads only after you accept analytics. It uses cookies and identifiers to measure page visits and technical usage events; these data should not be considered completely anonymous. Our own tool events do not include entered content, full filenames or free-form error messages. Google Signals and advertising personalization signals are disabled in the site's configuration.

You can accept or decline without losing access to tools and revisit your choice through Privacy preferences in the footer. The preference is saved in your browser for up to 180 days. Declining or withdrawing stops new first-party analytics events and attempts to delete analytics cookies accessible to the site; it does not retroactively erase data already received by the provider. This banner does not load Google Tag Manager.

After AdSense approval and activation, Google and its partners may use cookies, web beacons, IP addresses and identifiers to display and measure ads. Third parties may place cookies or collect data as a result of advertising. See how Google uses information from partner sites and apps and Google Ads Settings.

Accepting analytics on this site does not authorize personalized advertising. Our own banner is not a certified CMP and does not implement TCF. Personalized ads in the EEA, UK and Switzerland require a separately configured certified CMP. When that message is active, advertising choices must be managed there.

Services involved include Cloudflare Pages (hosting and protection), Supabase (functions, database and private storage), Google Cloud Run (worker), Google Cloud Vision (OCR), Groq (transcription when configured), Resend (message delivery), Google Analytics (consented analytics), Google Fonts (fonts) and Google AdSense if activated (advertising). They may process data in other countries depending on their infrastructure and contracts. We do not claim that all data remain in one region.

Depending on applicable law, you may request information about processing, access, correction, deletion and other rights, and withdraw consent. Use the contact page or privacy@utilnexo.com. Requests are not limited to contact messages: they may also concern account records, browsing and remotely processed files. We may need to verify your relationship to the data.

We use HTTPS and access controls for services and private storage. No system is risk-free. Keep original copies and assess the risks before sending sensitive personal data. Report vulnerabilities according to security.txt.

We will revise this page when relevant processing changes occur. The date above identifies this version. Continued browsing does not replace an explicit consent choice when one is required.