Your files belong to you. We treat them that way.
FileWhirl runs on TranscriptAI's infrastructure. The same rules that protect your transcripts and notes protect every file you convert here, and many conversions never leave your device at all, running entirely in your browser.
Our security principles
Many tools never upload
These run entirely in your browser: converting images: BMP, GIF, JPG, PNG, SVG and WebP saved as JPG, PNG or WebP; converting data files between CSV, INI, JSON, JSON5, NDJSON, TOML, TSV, XML and YAML; converting subtitles between SBV, SRT and VTT; converting HTML to Markdown and Markdown to HTML; the PDF tools Merge PDF, Split PDF, Rotate PDF, Add Page Numbers, Watermark PDF, Organize PDF, Crop PDF, Sign PDF, Redact PDF, Add Text to PDF, N-up PDF, Fill PDF Form, Flatten PDF and Compare PDF; and compressing an image to a target size. Those files never leave your device.
Encrypted in transit & at rest
Conversions that do upload use TLS 1.2+ and are stored encrypted.
1-hour retention by default
Files auto-delete one hour after the conversion completes.
Not used to train models
We never use your files to train AI. Ever.
Stateless processing
Heavier conversions run on stateless workers that keep nothing once the job is done. Outputs are deleted after 1 hour.
Honest limitations
We tell you what works and what doesn't. No security theater.
You stay in control
Convert with no account at all, or sign in and delete your account and data anytime from your dashboard.
FileWhirl file conversion processing
Many tools run entirely in your browser and never upload the file: converting images: BMP, GIF, JPG, PNG, SVG and WebP saved as JPG, PNG or WebP; converting data files between CSV, INI, JSON, JSON5, NDJSON, TOML, TSV, XML and YAML; converting subtitles between SBV, SRT and VTT; converting HTML to Markdown and Markdown to HTML; the PDF tools Merge PDF, Split PDF, Rotate PDF, Add Page Numbers, Watermark PDF, Organize PDF, Crop PDF, Sign PDF, Redact PDF, Add Text to PDF, N-up PDF, Fill PDF Form, Flatten PDF and Compare PDF; and compressing an image to a target size. For formats that need a heavier engine, files are temporarily stored in encrypted object storage, which Supabase provides, and processed by stateless workers on our own machines, then deleted from active storage one hour after the conversion completes, and from backups within 30 days.
TranscriptAI transcription and AI processing
When you choose to send a file to TranscriptAI, processing happens inside your TranscriptAI workspace under its retention and access controls. Your data is never used to train models.
Uploaded file security
All uploads use TLS 1.2 or higher. At-rest storage uses AES-256. Access is restricted to the user who uploaded the file, plus authorized workspace members where applicable.
Generated output handling
Converted files are downloadable from a signed, expiring URL. They are deleted on the same 1-hour schedule. Saving an output to a TranscriptAI workspace transfers it under that workspace's retention policy.