privacy policy

effective date: february 2025

1. introduction

this privacy policy describes how service ("we", "us", or "our") collects, uses, and safeguards the personal information and other data you ("user", "you", or "your") provide when using our file sharing application and website (collectively, the "service"). this privacy policy is an integral part of our terms of service. by using the service, you consent to the collection, use, and disclosure of your data as described below.

2. data we collect

2.1. personal information

we collect and store the following personal information in plaintext:

  • given name
  • family name
  • email address
  • profile picture link

2.2. user-uploaded content

as a file sharing service, you may upload files to the service. please note:

  • encrypted content: we store your uploaded files in their encrypted form. because the service uses end-to-end encryption, we do not have access to the decrypted contents of your files.
  • encryption keys: the encryption key is never transmitted to or stored on our servers; it is embedded within the shareable link and remains solely under your control.

2.3. file metadata

for each file you upload, we store metadata to facilitate the service, including:

  • file name
  • last modified date
  • file mime/type

2.4. transfer metadata

for each file transfer, we collect metadata related to the transfer, such as:

  • shareable link: generated to provide sharing capabilities.
  • optional description of transfer: a description provided by you.
  • expiration time: the time at which the transfer expires.
  • optional password for transfer: if provided by you, the password is stored as a hash.

3. how we use your data

we use your data for the following purposes:

  • account management: to create and manage your account and personalize your experience.
  • service delivery: to enable file uploads, store encrypted files, and manage file transfers.
  • operational purposes: to maintain and improve the functionality and security of the service.
  • communication: to send you information related to your account or the service (e.g., notifications, updates).

4. data sharing and disclosure

  • no sale or unauthorized distribution: we do not sell, give away, or transmit your personal data to third parties.
  • service providers: we may share your data with trusted third-party service providers who help us operate the service. these providers are contractually obligated to maintain the confidentiality and security of your data.
  • legal compliance: we may disclose your data if required to do so by law, regulation, or a legal process.
  • business transfers: in the event of a merger, acquisition, or asset sale, your data may be transferred, but only in accordance with this privacy policy and applicable law.

5. data security

we implement reasonable technical and organizational measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction. however, no security system is completely secure, and we cannot guarantee the absolute security of your data.

6. your rights and choices

  • access and correction: you have the right to access and correct the personal information we hold about you.
  • account deletion: you may request the deletion of your account. please note that deleting your account may result in the permanent loss of your uploaded encrypted files, metadata, and transfer records.
  • data portability: you may request a copy of your personal data in a commonly used format.

7. data retention

we retain your data for as long as necessary to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. encrypted files, file metadata, and transfer metadata are stored in accordance with our data retention policies.

8. international data transfers

your data may be stored and processed on servers located in jurisdictions other than your own. by using the service, you consent to the transfer of your data to countries that may have different data protection laws than those in your jurisdiction.

9. changes to this privacy policy

we may update this privacy policy from time to time. if we make material changes, we will notify you by posting the new privacy policy on our website and updating the "effective date" above. your continued use of the service after such changes constitutes your acceptance of the updated privacy policy.

10. contact information

if you have any questions about this privacy policy or our data practices, please contact us at [email protected].

11. acknowledgment

by using the service, you acknowledge that you have read and understood this privacy policy and agree to the collection and use of your data as described herein.