This policy explains what happens to your data when you use the tools on bigqtools.com: what we process, where, why and for how long. Here are the key points:
- Your files are uploaded to and processed on BigQTools servers, not in your browser.
- Every uploaded, imported and result file is deleted automatically 2 hours after it is created (or after the longer retention of your paid plan, if you have one), or right away when you click “Delete now”.
- We never share or sell your files, and we use them only to do the processing you asked for.
- Google Drive is optional. If you use it, BigQTools asks only for the
drive.filepermission, which covers just the files you pick and the files BigQTools saves for you. - No account is needed to use the tools. Signing in with Google, Facebook or Apple is optional; if you choose to sign in or buy a paid plan, we also process the account and payment data described in the Accounts and Paid plans sections.
- BigQTools sets only functional cookies; analytics and advertising cookies are set only with your consent. The site may show Google AdSense ads, see the Advertising section.
The data controller for bigqtools.com is BigQ. For any question about this policy or your data, write to [email protected].
Data we process
You can use every tool without an account, so you never have to give us your name, email address or phone number. We process the following data; account and payment data exist only if you choose to sign in or buy a plan.
Your files
This means files you add from your device (by choosing, dragging and dropping, or pasting them), files our server downloads from a link you provide, files you pick from Google Drive, and the result files we create. We also receive the settings you choose for a tool, such as the password for protecting or unlocking a PDF. PDF and archive passwords are used only while the job runs and are removed from our systems once the job finishes, usually within about 10 minutes. Files can contain personal information, so we treat everything you upload as private.
Technical records
To run the service, prevent abuse and enforce usage limits, we record:
- details of each processing run: the tool used, the time, file names, sizes and types, and the status and any error codes;
- the anonymous session identifier stored in the
bq_sidcookie, and the account that ran the job if you are signed in; - the IP address the request came from.
These records do not contain the contents of your files. We keep them only as long as they are needed to operate and secure the service and to produce aggregate statistics. File names can reveal personal details, so consider renaming a file before you upload it.
Emails you send us
If you email us, we receive your email address and the contents of your message, and we use them to reply to you.
Accounts (optional)
You can use every tool without signing in. If you choose to sign in with Google, Facebook or Apple, BigQTools receives from that provider:
- your account identifier at the provider (never your password);
- your email address and whether it has been verified. With Apple you can hide your email; we then receive an Apple relay address (
@privaterelay.appleid.com); - your display name (Apple sends it only the first time you sign in).
We do not receive your password, contacts, photos or posts, we do not load your profile picture (accounts are shown with initials), and we never post anything to your account. Google and Facebook access tokens are used once to read the details above and then discarded. For Apple, we keep an encrypted refresh token so we can revoke the sign-in when you delete your account. If you link several providers, they all belong to the same account.
While you are signed in, we also keep:
- the language you choose and the display name you set;
- your sign-in sessions: when each was created and last used, the browser and operating system, and a shortened IP address, so you can review them and sign out remotely;
- your processing history, kept for the number of days your plan allows.
When you sign in, the files and runs of your current anonymous session from the last 24 hours move to your account. Account data is kept until you delete your account. Sessions expire after 30 days without use (180 days at most) or as soon as you sign out. The provider’s own processing when you sign in follows its policy: Google, Meta, Apple.
Paid plans and payments
When you buy a paid plan, you pay on Stripe’s checkout page. Your card number and payment details are collected and processed by Stripe; BigQTools never sees or stores your card number. Stripe may use cookies and device information to prevent fraud, under the Stripe Privacy Policy.
We keep what we need to provide the plan and keep our books: your Stripe customer ID, plan, price and billing period, subscription status and renewal date, billing country, and invoices (number, amount, status and Stripe’s download links). Your account page may show the card brand and last four digits provided by Stripe. Stripe emails you receipts and payment notices.
Invoices and payment records are kept for as long as accounting and tax law requires, including after you delete your account (they are then no longer linked to your name or email). Refunds are described in our Refund Policy.
Purchases in the Android and iOS apps
When you buy a plan in our Android or iOS app, you pay Google Play or Apple, not us. To check the purchase and give you the plan, we receive from Google or Apple: the order or transaction number, the purchase token, the product you bought, and whether the plan is active, renewing, in a trial or cancelled. We never receive your card or bank details. Google and Apple handle the payment under their own privacy policies.
How and where files are processed
When you run a tool, your files travel over an encrypted HTTPS connection to BigQTools servers and are processed there automatically, rather than in your browser. We use open-source software to do the work:
- FFmpeg for video and audio
- ImageMagick for images
- LibreOffice and Stirling PDF for documents and PDFs
- 7-Zip for archives
The site is delivered through Cloudflare, which provides network protection and delivery. This means your requests to bigqtools.com, including the files you upload, pass through Cloudflare’s network on their way to our servers.
Our team does not open your files unless it is strictly necessary to investigate abuse, or a technical failure that you reported to us. In those cases, access is limited to that investigation.
How long files are kept
- Every file you upload or import, and every result file, is deleted automatically 2 hours after it is created. If your paid plan keeps files longer (as listed on the pricing page), files are kept for exactly that time and then deleted.
- You can delete your input and result files immediately with the “Delete now” button on the result screen.
- If a task fails, the file you uploaded for it may be kept for up to 7 days so our team can investigate and run it again, and is then deleted; you can still delete it right away by removing it from the tool.
- When a file is deleted, its download link stops working, so download your results before then.
Technical records, account data and invoices are kept separately, as described above. Copies you save to Google Drive belong to you and are not affected by this deletion.
Google Drive
Google Drive is optional: you connect it only when you want to pick files from Drive or save results to it.
What BigQTools can access
BigQTools uses Google Identity Services to ask for your permission and Google Picker to let you choose files. It requests a single OAuth scope: https://www.googleapis.com/auth/drive.file. With this scope, BigQTools can access only:
- the specific files you select in Google’s file picker, and
- files that BigQTools creates in your Drive when you click “Save to Google Drive”.
BigQTools cannot see, list or change any other file in your Drive. The Drive feature does not ask for your name, email address or any other information from your Google Account; signing in to BigQTools with Google is a separate feature, described in the Accounts section.
Importing files from Drive
- You sign in to Google if asked, grant permission and pick files in Google’s picker.
- Your browser sends the IDs of the picked files and a short-lived access token to BigQTools.
- Our server verifies that the token was issued to BigQTools, reads each picked file’s name, type and size, and downloads the file. Google Docs, Sheets and Slides files are exported to PDF or an Office format.
- From then on, the file is treated like any uploaded file, including automatic deletion when its retention time ends.
Saving results to Drive
When you click “Save to Google Drive”, our server uploads that result file to your Drive. The file in your Drive belongs to you. Our own copy is deleted on the normal schedule, and after that BigQTools keeps no copy.
Access tokens
The access token is kept only in the page’s memory during your current visit. It is sent to our server only to carry out an import or save that you requested; the server uses it for that request and does not store it in a database or in logs. Closing or reloading the page discards the token. You can revoke BigQTools’ access at any time at myaccount.google.com/permissions.
How we treat Google user data
- We use it only to provide the feature you asked for: importing, processing and saving the files you choose, and signing you in to BigQTools if you choose to sign in with Google.
- We do not use it for advertising, we do not sell it, and we do not use it to train models.
- We do not transfer it to third parties except as necessary to provide this feature.
- No one reads it, except in the narrow cases described above: to investigate a technical failure you reported to us, or when strictly necessary to investigate abuse.
BigQTools’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Files imported from links
When you paste a link, our server downloads the file from that address. The site hosting the file sees a request from our server, not from your device, and may log that request under its own policies.
For security, the server refuses links that point to private or internal network addresses. It also refuses streaming sites such as YouTube, TikTok and Facebook. A file imported from a link is processed and deleted exactly like an uploaded file. Please import only files you are allowed to download.
Apps (Android and iOS)
Our apps process your files on BigQTools servers in the same way as the website. In addition, the apps use the software kits (SDKs) below. Each one receives only what it needs for its purpose.
Software kits in the apps
These kits help us run the apps, send notifications and show ads:
- Firebase Analytics (Google): tells us how the app is used, so we can improve it. Data: app activity (screens and features used), device model and system, app-instance ID. Privacy policy
- Firebase Cloud Messaging (Google): sends notifications, for example when your file is ready. Data: a notification token for your device. Privacy policy
- Firebase Remote Config (Google): switches features and settings on or off without an app update. Data: app-instance ID, app version, device language and country. Privacy policy
- Firebase Installations (Google): gives each installation an ID that the other Firebase kits use. Data: installation ID. Privacy policy
- Firebase App Check (Google): checks that requests come from our real app on a genuine device, to stop abuse. Data: a device attestation from Google Play Integrity or Apple App Attest. Privacy policy
- Google AdMob (Google Mobile Ads, User Messaging Platform) (Google): shows ads and asks for your consent where the law requires it (User Messaging Platform). Data: advertising ID (Android) or IDFA (iOS, only with your permission), IP address (approximate location), device model and system, ad interactions. Ads are personalised only with your consent. Privacy policy
- BigQ Diagnostics (BigQTools): our own app monitoring: tells us whether features work and why they fail. Data: feature results, error codes, app version, device model and system. Never the contents of your files. Our own kit, covered by this policy.
Ad partners
AdMob can fill an ad space with an ad from one of these partners (mediation). The partner that shows the ad receives the same kind of data as AdMob: the advertising ID, IP address, device model and system, and how you interact with the ad.
- Pangle: Privacy policy
- Mintegral: Privacy policy
- PremiumAds: Privacy policy
Your choices about ads and tracking
You decide how ads use your data:
- European Economic Area, United Kingdom and Switzerland: the app shows Google’s consent message before personalised ads. You can change your choice at any time in the app, under Settings › Privacy choices.
- United States: under state privacy laws you can opt out of the “sale” or “sharing” of your data for targeted ads in the app, under Settings › Privacy choices.
- Android: you can reset or delete your advertising ID in your phone’s settings (Settings › Google › Ads, or Settings › Privacy › Ads, depending on the device). Without it, ads are not personalised.
- iOS: we ask your permission (App Tracking Transparency) before using the IDFA. If you say no, ads are not personalised. You can change this at any time in Settings › Privacy & Security › Tracking.
These partners may process data outside the country where you live, under their own privacy policies and the safeguards those describe.
The apps are not directed to children under 13, and we do not knowingly collect their data. Our ad requests are not marked as directed to children.
You can delete your account in the app, under Account › Settings › Delete account, or on the website. You don’t need the app to do it: see how to delete your account.
Cookies
BigQTools sets only the functional cookies below. The tools and sign-in need them to work, so they do not depend on your consent choice:
| Cookie | When | Purpose | Duration and attributes |
|---|---|---|---|
bq_sid | Always | A random, anonymous session identifier: links your files and processing runs to your browser so that only that browser can see and download them, and makes usage limits work. | 30 days; HttpOnly (scripts on the page cannot read it), SameSite=Lax. |
bq_user | Only when you are signed in | A random sign-in session token; our server stores only a hash of it. | 30 days from last use, 180 days at most, removed when you sign out; HttpOnly, Secure, SameSite=Lax, sent only to /api. |
bq_auth | Only when you are signed in | A display hint such as 1.pro.noads, so the page shows the right account button and no ad flicker on an ad-free plan. Never used for authentication. | Same duration as bq_user; Secure, SameSite=Lax, readable by the page. |
bq_oauth | While you sign in | Ties a sign-in attempt to your browser to prevent forgery. | 10 minutes; HttpOnly, Secure, SameSite=None, sent only to /api/v1/public/auth. |
If you block these cookies, the tools or sign-in may not work properly. The page also stores your consent choice in your browser and, while you sign in to buy a plan, briefly remembers the plan you picked so checkout can continue. Google's analytics and advertising cookies are set only after you consent, as described below and in the Advertising section.
We may use Google Analytics to count how often each tool is used. The page uses Google's consent mode: until you choose, and if you press “No thanks”, Google's script is loaded with storage denied — no analytics cookie is set and Google receives only anonymous pings that are not tied to your device. Only when you press “Allow” may analytics store a cookie and record your visit.
Google Analytics 4 does not store full IP addresses. You can change your mind at any time by clearing site data for bigqtools.com in your browser; the notice appears again.
When you click the Google Drive button, Google’s sign-in and Picker scripts load from google.com, and Google may set its own cookies under the Google Privacy Policy. When you sign in with Google, Facebook or Apple, or pay through Stripe, you are taken to that provider’s page, where it sets cookies under its own policy.
Advertising
To keep the tools free, BigQTools may show ads served by Google AdSense. Ads are always labelled “Advertisement”, and they are never placed inside the file area or next to the download buttons.
Ads follow the same consent mode as analytics: Google may set advertising cookies, for example to personalise ads, only after you press “Allow”. Until you choose, and if you press “No thanks”, ads may still appear but they are non-personalised and no advertising cookie is used. In the European Economic Area, the United Kingdom and Switzerland, Google may show its own consent dialog as required by law.
You can review and adjust how Google personalises ads at adssettings.google.com, and read how Google uses data for advertising at policies.google.com/technologies/ads.
Paid plans with the “No ads” benefit (when offered): while you are signed in to an account on such a plan, the page does not load Google’s ad code.
Sharing and service providers
We do not sell, rent or share your files, and we use them for nothing but the processing you requested. We rely on these service providers:
- Cloudflare delivers and protects the site. Requests to bigqtools.com, including uploaded files and your IP address, pass through Cloudflare’s network. See the Cloudflare Privacy Policy.
- Google provides Google Drive (when you choose to use it), Google Analytics (with your consent) and Google AdSense advertising, as described in the Google Drive, Cookies and Advertising sections. Google never receives your files unless you save a result to Drive yourself.
- Google, Meta (Facebook) and Apple authenticate you when you choose to sign in with their accounts, as described in the Accounts section. They never receive your files.
- Google Play and Apple process the payments for plans bought in our apps and tell us the purchase details described in the Paid plans section. They never receive your files.
- Stripe processes payments when you buy a paid plan, as described in the Paid plans section. Stripe receives your email address and BigQTools account ID to match payments to your account, and never receives your files.
No other third party receives your files.
Security
- All connections to bigqtools.com are encrypted with HTTPS.
- Files and processing runs are tied to your browser session, or to your account when you are signed in, so other people cannot see them.
- Download links are signed and stop working when the file is deleted. Keep your download links to yourself.
- Sign-in session tokens are stored on our servers only as hashes, and you can sign out of every device from your account page.
- Access to our servers and stored files is restricted to what is needed to run the service and to the cases described in this policy.
No system is perfectly secure. If a document is highly sensitive, consider whether you need to upload it, and click “Delete now” once you have downloaded the result.
Your choices and rights
- Delete your files now. Click “Delete now” on the result screen, or let files expire when their retention time ends. If you are not signed in, this is the most direct way to remove your files.
- Skip Google Drive. You can always add files from your device or from a link instead.
- Revoke Google access. Remove BigQTools’ access at any time at myaccount.google.com/permissions.
- Manage your account. If you sign in, you can change your display name and language, unlink a sign-in provider (at least one must remain), and sign out of one device or all devices from your account page. You can also remove BigQTools from your Google, Facebook or Apple account settings.
- Delete your account. On your account page, under Security, choose “Delete account”. We immediately cancel a plan bought on the website (with no automatic refund, see our Refund Policy), revoke the Apple sign-in, delete your linked sign-ins, sessions, files and processing history, and anonymise your email address and name. Invoices are kept as accounting rules require but are no longer linked to you. Data deletion requests sent through Facebook follow the same process. A plan bought through Google Play or the App Store is not cancelled by deleting your account: cancel it in the store. Step by step, and what is kept: how to delete your account.
- Cancel a paid plan. At any time from your account page, under Plan; the plan ends at the end of the period you have paid for.
- Personalised ads. Press “No thanks” on the notice to receive only non-personalised ads, or adjust your preferences at adssettings.google.com.
- Contact us. For questions about your data, access or deletion requests, or anything else, email [email protected]. Tell us your account email (if you have one), which tool you used and roughly when, so we can identify the data your request is about.
Children
BigQTools is not directed to children under 13. If you are younger than the age your local law requires to use online services on your own, please use BigQTools only with a parent’s permission. You must be at least that age to create an account, and an adult or have a parent’s consent to buy a paid plan.
Changes to this policy
We may update this policy. The date shown on this page tells you which version is current, and we will point out significant changes here. The update of 22 September 2026 adds optional accounts, paid plans through Stripe and the sign-in cookies. The update of 21 October 2026 adds the purchase data we receive from Google Play and the App Store, and the section on our apps and the kits they use.
Contact
If you have a question about privacy or a request about your data, email [email protected]. You can also visit our contact page or read our Terms of Use and Refund Policy.