Privacy Policy

Filedepot operates the Service. Depending on how you access us, the data controller or service provider responsible for your information may be the legal entity that owns and operates the Filedepot brand and infrastructure. Where this policy refers to “processing,” it means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.

This policy applies to visitors to our marketing pages, registered users, and anyone who downloads files through links generated through the Service. It does not govern third-party websites, embeds, or apps that we do not operate, even if they are linked from the Service.

We collect information in several categories so we can provide file storage, sharing, account management, billing (where applicable), security, and support.

2.1 Account and identity information

When you create or sign in to an account, we (and our authentication partners) may process your email address, name or display name if you provide one, profile image if you choose to use one, internal user identifiers, and authentication events (such as sign-in timestamps and device or session identifiers where available). This is standard for any hosted product that must know who is using storage and quotas tied to an account.

2.2 Files, folders, and metadata

The core of the Service is storing files you upload. We process the file contents themselves, file names, paths or folder structure, sizes, checksums or hashes where we compute them, MIME types or inferred types, upload and modification timestamps, and status flags (for example, whether a file is available, pending, or restricted). If you add descriptions, tags, or other labels in the product, we store those too. None of this should be surprising for a file locker–style platform: we need the bits you send us to store and deliver them when you or your invitees request a download.

2.3 Sharing, links, and access logs

When you create share links or otherwise make content retrievable without logging in, we process tokens or URLs, optional expiry or access rules you configure, and technical data about each request (such as timestamps, IP addresses, user agents, and whether the download succeeded). This helps us prevent abuse, enforce rate limits, investigate suspicious traffic, and understand aggregate usage patterns. Someone who only receives a link may not have an account with us; in those cases we still process technical data necessary to serve the file and protect the Service.

2.4 Usage, diagnostics, and security

We collect operational data such as API or app requests, error reports, performance metrics, storage consumption against your plan, and signals used to detect spam, malware distribution, credential stuffing, or policy violations. Where we employ automated or manual review (for example, scanning uploads when such features are enabled), we process the minimum data needed for that purpose.

2.5 Payments and billing

If you purchase a paid plan, our payment processor receives and processes payment card or wallet details and billing address elements as needed to complete the transaction. We typically receive a subset of that information (such as the last four digits of a card, subscription status, and invoice metadata) rather than full card numbers, which are handled according to the processor's privacy policy and industry standards (for example, PCI-DSS).

2.6 Communications

If you contact support, report abuse, or send us email, we retain the content of those messages and related metadata so we can respond and maintain a record of the issue.

2.7 Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, protect against fraud, and measure basic product usage. You can control many cookies through your browser settings; disabling some cookies may limit certain features (for example, staying logged in).

We use the information above to:

• Provide, maintain, and improve the Service, including uploads, downloads, previews where offered, folder management, and share links.
• Authenticate users, enforce quotas and plan limits, and display accurate storage usage in your dashboard.
• Process payments, issue receipts, and manage subscriptions or upgrades.
• Detect, investigate, and prevent abuse, fraud, illegal activity, violations of our Terms, and technical attacks.
• Comply with legal obligations, respond to lawful requests from public authorities, and establish or defend legal claims.
• Communicate with you about the Service, security alerts, policy updates, and (where permitted) product information.
• Generate aggregated or de-identified statistics that do not identify you personally.

Where European or UK data protection law applies, we rely on appropriate legal bases such as performance of a contract, legitimate interests (for example, securing the platform and analyzing aggregate usage), consent where required, and legal obligation.

We do not sell your personal information in the conventional sense. We share information only as described below.

• Service providers. We use vendors for hosting, cloud storage, authentication, payments, email delivery, analytics, security, and customer support tools. They process data on our instructions and are contractually bound to protect it.
• When you share. If you publish a link or otherwise make files retrievable, anyone with that link (or credentials you provide) may access the content you chose to expose. You control what you upload and which links you distribute.
• Legal and safety. We may disclose information if we believe in good faith that disclosure is required by law, subpoena, or court order, or is necessary to protect the rights, property, or safety of Filedepot, our users, or the public—including reporting apparent illegal content to competent authorities where appropriate.
• Business transfers. If we are involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to appropriate safeguards and notice where required.

We retain account information for as long as your account is active and for a reasonable period afterward to resolve disputes, enforce agreements, and comply with law. Files are retained until you delete them, until a share link expires (where the Service is designed to remove or revoke access automatically), or until your account is closed—subject to backup cycles and technical delays.

Security, abuse, and access logs are kept for a period necessary to investigate incidents, meet legal retention requirements, and improve detection systems; exact periods may vary by log type and jurisdiction.

When you delete files or close your account, we take steps to remove or anonymize data from active systems; residual copies in backups may persist for a limited time before being overwritten.

Depending on where you live, you may have rights to access, correct, delete, or export personal data we hold about you; to object to or restrict certain processing; to withdraw consent where processing is based on consent; and to lodge a complaint with a supervisory authority. California residents may have additional rights under the CCPA/CPRA, including rights to know, delete, and opt out of certain sharing (we do not sell personal information as defined by those laws in the traditional sense of selling lists to data brokers).

To exercise rights, use in-product account tools where available (for example, to download or delete files) or contact us using the details in Section 12. We may need to verify your identity before fulfilling certain requests.