Privacy Policy

Last updated: February 6, 2026

1. Introduction

This Privacy Policy explains how FileShare collects, uses, stores, and protects your personal information and files.

Our commitment: you own your data. We do not sell personal information or files and we use strong encryption to protect them.

2. Information We Collect

2.1 Account Data

  • Email, username, and password hash
  • Company name and company code if provided

2.2 Payment Data

  • Last four digits of the card, expiration, optional billing address, and Stripe customer ID

2.3 File Data

End-to-End files:

Files with end-to-end encryption are encrypted on your device. FileShare cannot decrypt them.

Server-side files:

Server-side encrypted files may be processed by FileShare only for operational needs such as controlled sharing, security scanning, and support.

We also collect metadata such as filename, size, timestamps, uploader identity, and access permissions.

2.4 Usage Data

  • Technical logs, IP addresses, device information, and audit records
  • Performance and feature usage data

3. How We Use Your Information

  • To provide the Service and manage files, access, and shared links
  • To process billing, notifications, security, and support
  • To comply with legal obligations and improve the platform

4. How We Share Your Information

We do not sell your data.

  • With payment, infrastructure, and email providers acting on our behalf
  • With authorized members of your organization
  • When required by law or as part of a business transfer

5. Data Retention and Deletion

  • Account data is retained while the account is active and in good standing
  • After cancellation, files may be retained temporarily for recovery
  • Some records may be retained longer for security, fraud prevention, accounting, or legal compliance

6. Your Rights and Choices

  • Access, portability, correction, and deletion rights
  • Rights to object to some optional processing
  • Additional GDPR and local privacy rights where applicable

7. Security Measures

  • TLS in transit and AES-256-GCM at rest
  • Role-based access controls, strong passwords, session limits, and audit logging
  • Infrastructure monitoring and encrypted backups

No system is perfect. You remain responsible for protecting credentials and encryption keys.

8. Cookies and Tracking

We use only the minimal technologies needed for authentication, session handling, and security, not advertising or third-party analytics cookies.

9. Children's Privacy

FileShare is not intended for use by children under 16 and we do not knowingly collect personal information from them.

10. International Data Transfers

Your data may be processed in multiple countries subject to safeguards such as encryption and contractual protections.

11. Changes to This Privacy Policy

  • Material changes will be communicated through appropriate channels
  • Updated versions take effect as indicated in the notice

12. Contact Us

For privacy questions or to exercise your rights, contact us:

Privacy inquiries: privacy@fileshare.example.com

Data Protection Officer: dpo@fileshare.example.com

General support: support@fileshare.example.com

Questions about your privacy?

Contact us anytime if you want more clarity.