Privacy policy

Who we are

CSV2Contacts is operated by Arkonis Pvt Ltd, Riyadh, Saudi Arabia. Arkonis Pvt Ltd is the data controller for the personal data described in this policy.

Your files stay on your device

CSV2Contacts is a client-side application. When you drop in a CSV, Excel, JSON or vCard file — or paste rows — all parsing, mapping, editing and file generation happens in your browser's memory. Closing the tab discards everything. You can verify this yourself: load the page, switch off your internet connection, and the converter still works. (The optional AI photo capture feature sends the photo to our AI provider for extraction, and is clearly marked as such before use.)

What we collect, and why

• Account data — email address and sign-in credentials, used to create and secure your account (legal basis: performance of our contract with you).
• Usage records — how many contacts you convert, used to apply the free daily allowance and your credit balance (legal basis: contract).
• Feedback — messages and ratings you choose to send us, used to improve the product (legal basis: legitimate interests).
• Technical data — IP address and device/browser identifiers in standard server logs, used for security and fraud prevention (legal basis: legitimate interests).

Payment-related data (card details, billing address) is collected and processed by Paddle, our Merchant of Record, not by us. Optional preferences like your theme choice are stored only in your own browser.

Who we share data with

• Paddle, our Merchant of Record — for selling credit packs, payments, subscription management, tax compliance and invoicing.
• Service providers — hosting, database and AI processing providers acting on our instructions.
• Professional advisers — legal and accounting, where needed.
• Authorities — where required by law.

Retention and security

We keep account and purchase records for as long as your account is active and as long as tax and legal rules require, then delete or anonymise them. We use appropriate technical and organisational measures — encryption in transit, access controls and least-privilege access — to protect the data we hold.

Your rights

You can request access to, correction or deletion of the personal data we hold about you, object to or restrict its processing, and withdraw consent where processing is based on consent. Because your contact files never leave your device, there is generally nothing for us to access or delete on that side. Contact us via the support page and we will respond promptly, and within one month where the law requires it. You may also complain to your local data protection authority.

Cookies and advertising

We use essential browser storage for sign-in and preferences. This site displays ads served by Google AdSense; ad providers may use cookies to serve and measure ads. Where required, a consent notice is shown before any advertising cookies are set. Ad scripts never receive the contents of your files — conversion happens outside any code an advertiser controls.

Changes

Any change to this policy will be posted on this page with an updated date.