this privacy policy describes how service ("we", "us", or "our") collects, uses, and safeguards the personal information and other data you ("user", "you", or "your") provide when using our file sharing application and website (collectively, the "service").
this privacy policy is an integral part of our terms of service.
by using the service, you consent to the collection, use, and disclosure of your data as described below.
we collect and store the following personal information in plaintext:
as a file sharing service, you may upload files to the service. please note:
encrypted content: we store your uploaded files in their encrypted form. because the service uses end-to-end encryption, we do not have access to the decrypted contents of your files.
encryption keys: the encryption key is never transmitted to or stored on our servers; it is embedded within the shareable link and remains solely under your control.
for each file you upload, we store metadata to facilitate the service, including:
for each file transfer, we collect metadata related to the transfer, such as:
if you purchase a subscription, we collect limited transaction information provided by our payment processor (merchant of record), including:
we do not collect or store full credit card numbers, cvc codes, or expiry dates. all sensitive billing data is processed and stored exclusively by our merchant of record.
we use your data for the following purposes:
account management: to create and manage your account and personalize your experience.
service delivery: to enable file uploads, store encrypted files, and manage file transfers.
operational purposes: to maintain and improve the functionality and security of the service.
communication: to send you information related to your account or the service (e.g., notifications, updates).
legal basis for processing (gdpr): if you purchase a subscription, the legal basis for processing transaction and subscription metadata is contractual necessity (to provide the paid features you requested) and our legitimate interest (for billing analytics, abuse prevention, and financial compliance).
no sale or unauthorized distribution: we do not sell, give away, or transmit your personal data to third parties.
service providers: we may share your data with trusted third-party service providers who help us operate the service. these providers are contractually obligated to maintain the confidentiality and security of your data.
payment processors and merchants of record: we use third-party merchants of record (e.g., lemonsqueezy) to handle billing and payments. we may share metadata (such as your user id or email) with them to facilitate your subscription, and they share transaction status data with us.
legal compliance: we may disclose your data if required to do so by law, regulation, or a legal process.
business transfers: in the event of a merger, acquisition, or asset sale, your data may be transferred, but only in accordance with this privacy policy and applicable law.
we implement reasonable technical and organizational measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction.
however, no security system is completely secure, and we cannot guarantee the absolute security of your data.
access and correction: you have the right to access and correct the personal information we hold about you.
account deletion: you may request the deletion of your account. please note that deleting your account may result in the permanent loss of your uploaded encrypted files, metadata, and transfer records.
important regarding subscriptions: deleting your account does not automatically cancel your subscription. you must cancel your subscription through the merchant of record or the billing settings before deleting your account to avoid future charges.
data portability: you may request a copy of your personal data in a commonly used format.
we retain your data for as long as necessary to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements.
encrypted files, file metadata, and transfer metadata are stored in accordance with our data retention policies.
subscription data retention: please note that transaction and billing metadata may be retained for accounting, tax, and audit purposes for a period required by applicable law, even if you delete your account.
your data may be stored and processed on servers located in jurisdictions other than your own.
by using the service, you consent to the transfer of your data to countries that may have different data protection laws than those in your jurisdiction.
we may update this privacy policy from time to time.
if we make material changes, we will notify you by posting the new privacy policy on our website and updating the "effective date" above.
your continued use of the service after such changes constitutes your acceptance of the updated privacy policy.
if you have any questions about this privacy policy or our data practices, please contact us at [email protected].
by using the service, you acknowledge that you have read and understood this privacy policy and agree to the collection and use of your data as described herein.