logo

Privacy Policy

How we collect, use, and protect your data when you convert files on .

Last updated: July 9, 2026

at https://pptbox.org is a service of S P Luminous Information Technology (registration no. 1050342), Office 350-051, Schon Business Park, Dubai Investments Park, Dubai 15804, United Arab Emirates. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our online file conversion service (the "Service"), in compliance with the GDPR and other applicable laws.

1. Data controller

The data controller is S P Luminous Information Technology, Office 350-051, Schon Business Park, Dubai Investments Park, Dubai 15804, United Arab Emirates. For privacy-related inquiries and data subject requests, contact us at mrktsales2025@gmail.com.

2. Data we collect

Depending on how you use the Service, we may process:

  • Account data: email address, password hash, subscription tier, Creem customer and subscription identifiers (for paid users), and account settings
  • File and conversion data: file name, size, MIME type, conversion direction, job status, and conversion history for logged-in users
  • Usage data: daily conversion counts, API usage, and tier enforcement signals
  • Technical data: IP address (hashed for rate limiting), browser type, device information, and server logs
  • Payment data: billing status and subscription period dates; payment card details are processed by Creem and are not stored by us
  • Communications: support emails and password-reset requests

3. Guest users

If you use the Service without an account, we set an essential guest_token cookie to enforce free-tier limits (2 conversions per day, 15 MB max file size). See our Cookie Policy.

4. How we use data

We use personal data to:

  • Provide, operate, and improve the conversion Service
  • Authenticate users and manage accounts
  • Enforce usage limits and prevent abuse
  • Process Premium subscriptions and payments through Creem as our Merchant of Record
  • Send transactional emails (welcome, password reset, billing notices)
  • Respond to support requests and legal obligations
  • Maintain security, detect fraud, and debug incidents

We do not sell your personal data.

5. Legal bases (where applicable)

If you are in the European Economic Area, United Kingdom, or similar jurisdictions, we rely on: (a) contract performance to provide the Service; (b) legitimate interests in security, abuse prevention, and product improvement; (c) consent where required (e.g. optional cookies if introduced); and (d) legal obligations.

6. File storage and security

Uploaded files are stored in isolated object storage, processed in sandboxed workers, and deleted within 48 hours unless a shorter retention applies. Files are encrypted in transit (TLS). Uploaded content is never executed.

No method of transmission or storage is 100% secure. You are responsible for maintaining backups of your files.

7. Sharing with third parties

We share data only with service providers who help us operate the Service, such as:

  • Creem — Merchant of Record for subscription billing and payment processing (see Creem's privacy policy)
  • Cloud hosting and infrastructure providers — application and database hosting
  • Email delivery providers — transactional email (when configured)

Providers are bound by contractual obligations to protect data and process it only on our instructions. We may also disclose data if required by law or to protect rights, safety, and security.

8. International transfers

S P Luminous Information Technology is based in United Arab Emirates. Your data may be processed in the UAE and in other countries where our infrastructure or subprocessors operate. Where required, we implement appropriate safeguards for cross-border transfers.

9. Retention

  • Uploaded and converted files: deleted within 48 hours
  • Account data: retained while your account is active and as needed for legal obligations
  • Billing records: retained as required for tax and accounting purposes
  • Server logs: retained for a limited period for security and debugging

10. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, contact mrktsales2025@gmail.com. We will respond within applicable legal timeframes.

You may lodge a complaint with a supervisory authority in your country if you believe our processing violates applicable law.

11. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children. Contact us if you believe a child has provided data and we will delete it.

12. Free and paid tiers

The free plan is available indefinitely with daily limits and a watermark on PDF exports (ppt to pdf / pptx to pdf). PDF to PowerPoint output is not watermarked. Paid plans remove watermarks and increase limits. Tier enforcement is server-side.

13. Changes

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date.

14. Contact

For privacy inquiries: mrktsales2025@gmail.com