Data we process#
- Your files: only to carry out your request; deleted automatically (24 hours on the free tier, 3 days with credits, 7 days with Pro, 30 days if kept) or when you press “Delete now”.
- Share links (if you create one): when it was created, when it expires and how many times it was downloaded. A download is logged like any request (truncated IP, against abuse); we don’t record the identity of whoever opened the link.
- Browser identifier: a random ID stored in a cookie to count free runs and keep your wallet. It contains no personal information.
- Browser technical signature: a hash of browser settings, used only to count free runs and prevent abuse; it never opens a wallet and is deleted after 30 days of inactivity. It is personal data under Decree 356/2025/NĐ-CP.
- Network: your IP address (truncated when stored) to prevent abuse and apply per-network limits.
- Google account (optional): if you sign in with Google we receive and store your Google account ID, email address, name and whether the email is verified, to keep your wallet across devices. We never receive your Google password and never read your Gmail or other Google data.
- Orders and payments: what you bought, the amount, payment code and time and, if you ask for a company invoice, your company name, tax code, address and invoice email. We never see your card number (see “Who else handles data”). A notice with the order id, amount and masked email, never files, is posted to an internal tool.
- Support requests: if you use the support form we store your message, topic, reply email and Wallet ID, and post a short internal notice to an internal tool (reference, topic, masked email, Wallet ID and the first 300 characters of the message). Please don’t put documents or sensitive details in a request.
- Referral code: if you arrive through a partner link, we keep the code in a cookie for 30 days to credit the referral; partners only see counts, never your information.
Who else handles data#
- SePay (bank transfers in Vietnam): reports each transfer to us. We receive and store the amount, time, bank reference and the transfer note you typed, so please write only the payment code in it.
- Polar.sh (card payments, international): merchant of record. It collects your card and billing details, handles tax and sends its own receipt; we never see or store card numbers and only learn the order amount and status.
- Some of these providers are outside Vietnam, so data may be processed abroad.
What we don’t do#
No cross-site tracking, no selling data. We send transactional emails only (receipts, security alerts, replies to support); no marketing emails.
Your rights#
You can delete files at any time, export your account data (JSON) and delete your account on the wallet page. Deleting your account removes all files immediately. To have a support request deleted, write to the support email.