Privacy Policy
1. Introduction
Welcome to our file upload and sharing service. We respect your privacy and are committed to protecting your personal data. This privacy policy explains in detail how we collect, use, share, and safeguard your information when you use our platform.
By using our service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our policies and practices, please do not use our service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Full name
- Profile picture (if provided)
- Account creation and update timestamps
- Tenant/organization affiliation
2.2 Upload Link Data
When you create upload links, we collect:
- Link name and description
- Link settings (expiration date, password protection, file size limits, allowed file types)
- Access control settings
- Collection preferences for uploader information
- Link creation and update timestamps
- Unique identifiers for your links
2.3 File Information
For files uploaded through our service, we collect:
- File metadata (name, size, type/format)
- Upload timestamp
- File status information
- Google Drive file IDs (when Google Drive integration is used)
2.4 Uploader Information
When configured to collect information from uploaders, we may collect:
- Uploader's name
- Uploader's email address
- Uploader's message or notes
- IP address of the uploader
2.5 Usage Data
We automatically collect certain information when you visit or use our service:
- IP addresses
- Browser type and version
- Device information
- Referrer URLs
- Pages visited and features used
- Date and time of access
- Link view statistics
2.6 Google Drive Integration Data
If you connect your Google Drive account, we collect:
- Access and refresh tokens
- Token expiry information
- Google account email
- Connection status
3. How We Use Your Information
3.1 Providing and Improving Our Service
- To create and manage your account
- To process and facilitate file uploads and sharing
- To authenticate users and verify access permissions
- To maintain and improve our service functionality
- To develop new features and services
- To provide customer support
3.2 Communications
- To send notifications about uploads to your links
- To alert you about link expiration
- To communicate about your account and our services
- To respond to your inquiries and support requests
3.3 Security and Protection
- To detect, prevent, and address technical issues
- To protect against unauthorized access and potential abuse
- To enforce our terms of service
- To verify authorized email access to protected links
3.4 Analytics and Improvement
- To analyze usage patterns and trends
- To monitor performance and stability
- To measure the effectiveness of our features
- To optimize user experience
4. Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Contract fulfillment: Processing necessary to provide our service to you according to our terms
- Legitimate interests: Processing that serves our legitimate business interests, such as improving our service and ensuring security
- Consent: Processing based on your specific consent, such as for marketing communications
- Legal obligation: Processing required to comply with applicable laws
5. Data Storage and Security
5.1 Data Storage
Your data is stored securely in our database hosted on Supabase. We implement industry-standard security measures to protect your information, including encryption, access controls, and regular security assessments.
5.2 File Storage
Files uploaded through our service are stored either on our secure servers or in your connected Google Drive account, depending on your configuration. We implement appropriate technical measures to protect file data during transmission and storage.
5.3 Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Upload links and associated data are retained until deleted by users or until link expiration, if configured.
5.4 Security Measures
We employ various security measures to protect your information, including:
- Encryption of sensitive data at rest and in transit
- Secure password hashing for protected links
- Regular security audits and updates
- Access controls and authentication mechanisms
- Monitoring for suspicious activities
6. Data Sharing and Disclosure
6.1 Service Providers
We may share information with third-party service providers who help us operate, provide, improve, and promote our service. These providers have access to your information only to perform tasks on our behalf and are obligated to protect your information.
6.2 Within Your Organization
If you are part of a tenant or organization, certain information may be shared with other members of your organization according to your organization's settings and access controls.
6.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
6.4 Business Transfers
If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.
6.5 With Your Consent
We may share your information with third parties when you have given us your consent to do so.
7. Your Rights and Choices
7.1 Access and Update
You can access and update certain personal information through your account settings. You may also contact us directly to request access to, correction of, or deletion of personal information.
7.2 Data Portability
You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format.
7.3 Deletion
You can delete your account and associated personal information at any time. Some information may be retained as required for legitimate business purposes or to comply with legal obligations.
7.4 Objection and Restriction
You have the right to object to or request restriction of processing of your personal information under certain circumstances.
7.5 Notification Preferences
You can manage your notification preferences through your account settings, including options for upload notifications and link expiration alerts.
8. Cookies and Tracking Technologies
8.1 Cookies
We use cookies and similar tracking technologies to track activity on our service and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.
8.2 Types of Cookies We Use
- Essential cookies: Required for the operation of our service
- Analytical/performance cookies: Allow us to recognize and count visitors and analyze how users navigate our service
- Functionality cookies: Enable us to personalize content and remember your preferences
- Targeting cookies: Record your visit to our service, the pages you have visited, and the links you have followed
8.3 Cookie Control
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.
9. International Data Transfers
Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country.
When we transfer your information to other countries, we will protect that information as described in this Privacy Policy and in accordance with applicable data protection laws. We use appropriate safeguards, such as standard contractual clauses, to ensure that your information receives an adequate level of protection.
10. Children's Privacy
Our service is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers.
11. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- By email: [email protected]
- By mail: [your physical address]
13. Data Protection Authority
If you have concerns about our privacy practices, you also have the right to make a complaint to your local data protection authority.