Privacy Policy
Last updated: [DATE] · Applies to the Hindi Converter add-in for Microsoft Excel, Word and PowerPoint, its licensing server, and the website hindiconverter.com.
1. Short version
- Your documents stay on your computer. The add-in converts text inside Office on your device. Document text, file names and file contents are never sent to us or to anyone else.
- To run your free trial and check your paid access, the add-in sends a random install ID to our server. No sign-in is needed for the trial. If you buy, you sign in in your browser with Google or Microsoft, and we keep your account ID, email, name, plan and paid-until date.
- When you pay, you enter a 10-digit Indian mobile number, which we store and pass to our payment provider, Cashfree Payments. Payments are made on Cashfree’s page; we never see or store your card number, UPI PIN or bank login.
- The add-in has no analytics, advertising or tracking. We do not sell or share your data for marketing.
2. Who we are
Hindi Converter is provided by [BUSINESS LEGAL NAME], [REGISTERED ADDRESS], India, GSTIN [GSTIN] (“we”, “us”). For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary for the personal data described below.
Contact for privacy questions: [SUPPORT EMAIL]. Grievance Officer: see section 11.
3. Data we do not collect
- The text, numbers, formulas or any other content of your workbooks, documents or presentations.
- File names, file paths or document properties.
- What you convert, how often you convert, or which features you use.
- Your card, UPI or bank account details (these go directly to Cashfree Payments).
- Your Office contacts, mail, calendar or files in OneDrive / SharePoint. The add-in does not request access to these.
4. Personal data we collect and why
| Data | Source | Purpose |
|---|---|---|
| Google or Microsoft account ID (a unique identifier) | The ID token from the sign-in you do in your browser on our account page | To recognise your account so your paid access works, one computer at a time |
| Email address and name | The same ID token | To identify your account, send invoices, expiry reminders and service emails, and answer support requests |
| Trial start and end dates, and the number of large conversions done in the trial | Created by our server the first time the add-in opens and reaches it, for that install | To run the free trial (7 days or 10 large conversions) without any sign-in |
| A random install ID and the Office app name (Word, Excel or PowerPoint) (not a hardware serial number; it cannot identify the machine outside our add-in) | Created by the add-in and kept in that computer's browser storage for the add-in; sent with each licence check | To give each install its own trial, to make each plan or office place work on one computer at a time, and to count how often it is moved to another computer. Clearing Office's web cache or reinstalling Office may create a new ID and so start a new trial |
| A salted one-way hash of your IP address (the IP address itself is not stored with it) | Your request to our server when an install first appears | Only to limit how many new trials can start from one network address (at most 20 in 30 days) |
| Plan, paid-until date, office licence membership (and the office code, for the buyer), Cashfree order and payment IDs | Our server and Cashfree Payments | To unlock the add-in for paying users, add time when you buy again, and handle refunds |
| Mobile number (10-digit Indian number) | You, on our account page when you choose to pay | Required by Cashfree Payments for every order. We store it with your account and pass it to Cashfree to create the payment order, and use it to match payments and answer billing questions |
| Billing name, billing address, state, and GSTIN if you provide one | You, when paying (via Cashfree Payments) | To issue GST-compliant tax invoices and meet tax-law record-keeping duties |
| Support emails and their contents | You | To answer your request |
| Technical request logs: IP address, time, request path, response code, browser / Office user agent | Our hosting provider, automatically | Security, preventing abuse, and fixing errors |
From Google or Microsoft we receive only your name, email address and an account ID, in an ID token. We have no access to your mail, drive, files or contacts. The token is used only to verify who you are, and we do not store the token itself after checking it. Sign-in happens only in your browser on our account page, never inside Office.
5. Legal basis and consent
We process the data above on the basis of your consent, which you give when you sign in on our account page or open the add-in after being shown a link to this policy, and for the “legitimate uses” allowed by section 7 of the DPDP Act, including providing the service you asked for and complying with law (for example GST and income-tax record-keeping).
You can withdraw consent at any time by writing to [SUPPORT EMAIL] or using the deletion request in section 9. Withdrawal does not affect processing done before it. If you withdraw consent, we can no longer check your licence, so the paid features will stop working.
6. Who we share data with
We share personal data only with these service providers (Data Processors), only for the purposes above, and under contracts or terms that require them to protect it:
| Provider | What they do | Data involved |
|---|---|---|
| Google LLC (Sign in with Google) | Sign-in in your browser, if you choose Google. Google issues the ID token the account page sends to us. | Governed by Google’s own privacy policy |
| Microsoft (Microsoft Entra ID / Microsoft account) | Sign-in in your browser, if you choose Microsoft. Microsoft issues the ID token the account page sends to us. | Governed by Microsoft’s own privacy statement |
| Cashfree Payments India Pvt Ltd | Payment processing (UPI, cards, netbanking, wallets) and payment receipts | Name, email, mobile number, order details, and the payment details you enter on Cashfree’s page |
| Cloudflare, Inc. | Hosts this website and the add-in files; network security | IP address and request logs |
| [SERVER / DATABASE HOST] | Runs our licensing server and stores the account records in section 4 | Account and licence records |
| [EMAIL PROVIDER] | Sends invoices and service emails; receives support email | Name, email, email contents |
| Google Fonts | Serves the Hindi font used on this website (not in the add-in) | Your IP address when you visit the website |
We may also disclose data when required by Indian law, a court order, or a lawful request from a government authority.
We do not sell personal data, and we do not share it with advertisers or data brokers.
7. Where data is stored
Our service providers may store or process data in India or in other countries, for example where Cloudflare or Microsoft operate data centres. We transfer data outside India only as permitted under the DPDP Act and any restrictions notified by the Government of India.
8. How long we keep data
- Account and trial records: while your account is active, then deleted within 90 days after you ask us to delete it, or 3 years after your last sign-in, whichever comes first. Install records (random install ID, Office app, trial dates and count, and the salted IP hash) are kept for as long as the add-in may still be in use, and are deleted on request together with your account records.
- Invoices and payment records: for as long as Indian tax and accounting law requires (currently up to 8 years), even if you delete your account.
- Support emails: up to 2 years after the conversation ends.
- Technical request logs: up to 30 days, unless needed longer to investigate a security incident.
9. Your rights
Under the DPDP Act you have the right to:
- Access: get a summary of the personal data we hold about you and how we use it, and the names of those we shared it with.
- Correction and completion: ask us to correct inaccurate or incomplete data, for example billing details.
- Erasure: ask us to delete your data. We will delete it except where law requires us to keep it (for example tax invoices).
- Grievance redressal: complain to our Grievance Officer (section 11) and get a response.
- Nomination: name another person to exercise these rights for you in case of death or incapacity.
- Withdraw consent at any time (section 5).
How to make a request: email [SUPPORT EMAIL] from the email address on your Google or Microsoft account, with the subject “Data request”, saying what you want. If you write from a different address we may ask you to confirm the request by signing in. We reply within 30 days. Deleting your data ends your access, including any paid time you have left, and time already paid for is not refunded unless our Refund policy applies. Nothing renews by itself, so there is nothing to cancel.
10. Security
- All traffic between the add-in, the website and our server uses HTTPS.
- Sign-in tokens are checked against Google’s and Microsoft’s published keys; we do not handle passwords. Raw IP addresses are not stored with install records.
- Access to the account database is limited to people who need it to run the service.
- If a personal data breach happens, we will inform affected users and the Data Protection Board of India as the DPDP Act and its rules require.
11. Grievance Officer
In line with the DPDP Act and the Information Technology Act, 2000 and rules made under it:
[GRIEVANCE OFFICER NAME], Grievance Officer
[BUSINESS LEGAL NAME]
[REGISTERED ADDRESS]
Email: [SUPPORT EMAIL] (subject: “Grievance”)
Working days: Monday to Friday, 10:00–18:00 IST
We acknowledge grievances within 48 hours and resolve them within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India once it accepts complaints under the DPDP Act.
12. Children
Hindi Converter is meant for adults and organisations. Do not use it if you are under 18. If we learn that we hold data of a child without verifiable parental consent, we will delete it.
13. This website
This website sets no cookies of its own and uses no analytics. Our hosting provider (Cloudflare) may set strictly necessary security cookies and keeps request logs as described above. Pages load the Noto Sans Devanagari font from Google Fonts, which means Google receives your IP address. On the account page only (in your browser, never inside Office), your browser also contacts accounts.google.com, login.microsoftonline.com, cdn.jsdelivr.net (the Microsoft sign-in library), sdk.cashfree.com and api.cashfree.com. The Cashfree Payments page, when you use it, is covered by Cashfree’s privacy policy.
14. Microsoft Marketplace
If you get the add-in from Microsoft Marketplace or your organisation deploys it through the Microsoft 365 admin center, Microsoft handles that installation under its own privacy statement. We do not receive any data from Microsoft about your installation other than the install ID described above.
15. Changes
If we change this policy in a way that affects how we use your data, we will update the date at the top and email active users at least 15 days before the change applies.