Back to main page

Privacy Policy

Last updated and effective: November 13, 2026

This policy explains how HEICtoJPEG.io handles information when you visit our website or convert HEIC and HEIF images to JPEG. Image conversion runs on your device. You do not need an account, and your images are not uploaded for conversion.

A separate section below describes the optional, private SocialBu development agent and its Gmail access. The image converter does not request access to your Google account or mailbox.

Who We Are

HEICtoJPEG.io is maintained by the team at SocialBu LLC.

For privacy questions or requests, contact info@heictojpeg.io.

Your Images and Converted Files

The converter reads only files you select or drop onto the page. HEIC and HEIF decoding, JPEG creation, previews, and ZIP downloads happen within your browser. We do not receive or store the image contents on our servers.

Source files, previews, and converted files are held in temporary browser memory while the page is open. Removing a file, refreshing the page, or closing it clears the corresponding in-page data. Files you download remain on your device until you delete them.

Converted JPEGs do not preserve the original EXIF metadata, such as GPS coordinates, camera details, or the date taken. Your original files remain unchanged. You retain ownership of your images and converted files.

Information From Website Visits

Loading the website sends ordinary request information to our hosting and delivery providers, including your IP address, requested page, browser and device information, referrer where supplied, and request time. This information supports page delivery, security, and troubleshooting.

The converter has no account registration, subscription, payment form, or server-side image storage. If you email us, we receive your email address and the information you choose to include. Please do not email sensitive images or credentials.

Analytics, Cookies, and Browser Storage

Our public pages load Google Tag Manager, which can load analytics tags to help us understand page visits and website performance. These services may receive technical and usage information and may set cookies according to their configuration. Image conversion does not depend on analytics or cookies.

The site stores your selected light or dark theme in local storage under heic-to-jpeg-theme. Language selection is represented by the page URL. Translations are bundled with the website rather than sent to an external translation service.

For more about website cookies and browser controls, read our Cookie Policy. You can clear local storage and cookies or block third-party requests in your browser settings.

Google describes its handling of information in its Privacy Policy.

How We Use and Share Information

We use website request data and support messages to deliver and protect the website, answer questions, diagnose problems, and understand how the site is used. We do not sell your personal information, and we do not use your image contents for advertising or AI model training.

Cloudflare provides website hosting and delivery. Google provides Tag Manager and any Google analytics services enabled through it. These providers process the information needed for their services under their own privacy terms. Fonts and translation files are served with the website.

We may disclose information where required by law or where necessary to address abuse, protect the service, or respond to a valid legal request. Links to other websites are subject to those websites' own policies.

Retention and Security

We have no server-side copies of your converted images to retain or delete. Theme preferences remain in your browser until you change or clear them. Support correspondence is retained as needed to address the request and any related legal obligations. Hosting and analytics providers apply their own retention settings and policies to their records.

The website uses HTTPS. Local conversion reduces the need to transmit image content, but no browser, device, or online service can guarantee absolute security. Keep your device secure and retain your own copies of important files.

Optional Private SocialBu Development Agent

The site operator also uses a local MacBook application called SocialBu MacBook Development Agent. Its Google consent screen uses the app name website. It helps its owner investigate and implement SocialBu development tasks. It is separate from the HEICtoJPEG converter and is not a Gmail feature offered to website visitors.

When its owner explicitly authorizes it, the agent sends development reports and clarification requests to the owner's own Gmail mailbox and reads replies in known clarification threads. It does not use Gmail data for advertising, sell it, or make it available to other website visitors.

Gmail Permissions and Data Use

The agent requests Gmail read-only access and permission to send mail. Google's read-only permission technically permits reading the mailbox; the application limits its workflow to locating its own reports and reading messages in correlated clarification threads, including message text, sender and recipient details, timestamps, and thread references. It does not delete mail or change labels.

Gmail data is used to send task notifications, match replies to the correct task, and incorporate clarification into requested development work. Relevant clarification text is passed to the owner's configured Codex/Pooler execution service for that work. The local agent does not use Gmail content to train AI models. The execution provider's own processing and retention terms also apply.

Gmail content and authorization are not shared with website analytics or published to Basecamp or Bitbucket by the agent.

The agent's use and transfer of information received from Google APIs must comply with the Google API Services User Data Policy, including its Limited Use requirements. Gmail data is used only for the authorized workflow and is not used to develop, improve, or train generalized AI or machine-learning models.

Gmail Storage, Retention, and Revocation

OAuth credentials are stored in macOS Keychain on the owner's Mac. Task history, relevant clarification text, outgoing reports, and Gmail thread and message references are stored in a local SQLite database. Completed disposable development workspaces are scheduled for cleanup after 30 days. Job history and candidate commits remain until the owner removes them. Messages sent through Gmail remain in the mailbox under the owner's Google account controls.

The owner can stop future Gmail access by revoking the app at Google Account connections. The owner can also stop the local background agents, remove the dedicated Keychain authorization, and delete the local agent data. Revoking access does not erase existing email, local task history, or data already processed by an execution provider.

Questions about this private integration or deletion requests can be sent to info@heictojpeg.io.

Your Choices and Privacy Rights

You can close or refresh the converter to clear its in-page files, delete downloaded files yourself, and clear browser storage or cookies through browser settings. Because we do not receive your images, we cannot retrieve or delete copies on your device.

Depending on your location, you may have rights to access, correct, delete, export, object to, or restrict processing of personal information we hold, and to withdraw consent where applicable. Contact us to make a request; we may need to verify your identity. You may also complain to your local data protection authority.

Our service providers may process website data outside your country. Their privacy policies describe where and how they process information. Contact us if you need more information about the handling of a particular request.

Children's Privacy

The website and private development agent are not directed to children under 13. If you believe a child has sent personal information to us, contact us so we can address it.

Changes to This Policy

We will publish policy updates on this page and revise the date above. If we materially change the private agent's Gmail access or data use, additional authorization will be requested before that access or use changes.