Is ChatToPDF safe?
A fair question — a WhatsApp export can hold years of private conversation. Here is every security and privacy claim we make, stated specifically enough to be checked, with the honest alternative for chats you shouldn't upload anywhere.
Page reviewed and updated 13 July 2026.
Encrypted in transit
Uploads travel over HTTPS. Files are then processed in a server-side job directory. ChatToPDF does not currently make a separate, verified encryption-at-rest claim for that application volume.
Seven-day automatic file deletion
Source exports, extracted media, and generated downloads for paid and unpaid jobs are automatically deleted no later than seven days after upload. If a job is actively processing at that deadline, deletion may be delayed by no more than 24 hours so the conversion can finish. The same schedule is stated in our privacy policy.
Automated conversion; Deepgram training opt-out
Parsing and rendering run automatically; the normal conversion has no manual review step. Voice-enabled jobs send audio files — not the full chat text — to Deepgram. Every request sets mip_opt_out=trueto opt out of Deepgram's Model Improvement Program.
Don't want to upload at all? Use our open-source tool
If your chat is too sensitive to upload anywhere, we publish a free, MIT-licensed command-line converter — whatsapp-chat-to-pdf on GitHub (also on PyPI and npm) — that runs 100% on your own machine. Text-only output, but nothing ever leaves your computer. We'd rather you use that than upload something you're uncomfortable with.
Your card details never touch our servers
Payments are handled by PCI-DSS Level 1 payment processors (card checkout via our merchant of record, or PayPal). We receive a payment confirmation — never card numbers. Every purchase is a one-time charge: no subscription, nothing stored for recurring billing.
7-day money-back guarantee, in writing
If the output isn't what you needed, contact us within 7 days for a full refund — the terms are in our refund policy, not just on a landing page.
What we log, and what we never do
We keep operational logs (job status, error traces, payment records) for debugging and tax compliance — detailed retention periods are in the privacy policy. We do not sell, share, or analyze the content of your conversations, and no chat content is used to train AI models — see our AI policy.
Honest limitations
We're a small, independent product — not a company with a SOC 2 report or an external audit certificate, and we won't pretend otherwise. What we offer instead is verifiability: a short, specific deletion schedule you can hold us to, a privacy policy that matches the actual system behaviour, an open-source local tool for the cases where uploading is the wrong call, and a refund policy in writing. If you have a security question this page doesn't answer, ask us directly — security questions get answered first.