AI Code Convert

GDPR overview

There is no GDPR implementation to report, and that is the finding rather than a gap in our review: the terms GDPR and General Data Protection Regulation appear nowhere on the site, neither in the rendered text nor in the underlying HTML. The privacy policy, last updated on 13 September 2024, opens by promising to tell you about your privacy rights and how the law protects you, then never enumerates them. No legal basis is stated, no retention period, no right of access, rectification or erasure, no Article 27 representative in the European Union, no data protection officer, no subprocessor list and no data processing agreement. The only privacy channel offered is the contact email at the foot of the policy. Silence is not proof of non-compliance, but a European user has nothing here to rely on.

Who owns the data?

The Terms of Service are unusually clear on this one point: you keep every right to the source code you submit, and the publisher states that it claims no intellectual property over the code you convert. Ownership of the site itself, meaning its own content, features and functionality, is asserted by AI Code Converter. Beyond that declaration the documents fall silent. The privacy policy lists only an email address and usage data as personal information collected, and never describes what becomes of the code you paste, who may read it, how long it is held, or whether any third party processes it on the publisher's behalf.

Reuse rights

For your own material the position is permissive. Because you retain all rights to your source code and the publisher claims none over the converted output, you may reuse, publish, modify or sell the generated code without asking permission. The Terms attach no attribution requirement and no licence condition to results. The restrictions imposed concern conduct rather than reuse: you may not upload malicious code, breach or circumvent security measures, infringe third-party intellectual property, or run unauthorised automated access. Content belonging to the site itself is separately protected and is not yours to reuse.

Data retention & training

Hosting summary

The site publishes nothing about where data is hosted or under which jurisdiction it is processed. No hosting country, no region, no cloud provider and no subprocessor is named in the privacy policy, in the terms, or anywhere else. The only observable element is infrastructural rather than declarative: the domain is served from behind Cloudflare, resolving to the anycast address 172.67.168.207, which geolocation places in the United States. That identifies the content delivery network fronting the site and nothing more. It does not indicate where requests are processed, where the model runs, or where any stored data resides, since an anycast address answers from whichever edge node happens to be nearest the visitor. For a European user this leaves no documented transfer mechanism, no standard contractual clauses and no stated jurisdiction. Anyone with a data residency requirement should treat the question as unresolved rather than infer a location from the network evidence.