1. What information do we collect?
Personal information you provide
We collect information you voluntarily provide when you create an account, contact support, or use File Drop. This can include your email address, password or authentication credentials handled by our authentication provider, account identifiers, and the content of support communications.
When social sign-in becomes available, the provider may share basic account details such as your email address and profile identifier according to the permissions you approve. Google sign-in is not currently enabled in the live interface.
Transfer and session information
To provide file transfers, we process session tokens, transfer direction, file names, MIME types, file sizes, timestamps, progress and completion state, and the temporary files you choose to transfer. A QR code contains or points to a unique session URL or token used to connect the devices.
Information collected automatically
Our servers may receive standard technical information such as IP address, browser type, device type, operating system, request timestamps, referring URL, error information, and security logs. The web app stores the signed-in session in browser local storage so you can remain authenticated. We do not currently operate a first-party advertising or behavioral analytics system.
Cookies and similar storage
File Drop does not currently use first-party advertising cookies. The web experience uses browser local storage to retain the authenticated session. Hosting, authentication, or security providers may use cookies or similar technologies that are necessary to deliver their services. If optional analytics or marketing technologies are introduced, this notice and any required consent controls will be updated first.
2. How do we process your information?
We process information to create and maintain accounts, authenticate users, create and connect QR sessions, upload and deliver files, show transfer status, prevent abuse, troubleshoot errors, respond to support requests, maintain service security, and comply with legal obligations.
File Drop does not use transferred file content for advertising. Temporary files are used only to complete the transfer and associated operational tasks.
3. What legal bases do we rely on?
Where applicable law requires a legal basis, we rely on performance of a contract to provide the service you request, legitimate interests in operating and securing File Drop, consent when you have expressly provided it, and compliance with legal obligations. You may withdraw consent where consent is the applicable basis, without affecting processing already completed.
4. When and with whom do we share personal information?
We may share limited information with service providers that help us operate File Drop, such as Supabase for authentication and database services, hosting and infrastructure providers, and email or support providers if configured. These providers may process information only for the contracted service and subject to their own terms and privacy obligations.
We may also disclose information when required by law, to protect users or the service, or as part of a business transfer. We do not sell personal information or transferred files.
5. How do we handle social logins?
If social login is enabled in the future, File Drop will receive the account information authorized by you and the provider. We will use it to authenticate and manage your account. Review the relevant provider’s privacy policy to understand its independent practices.
6. How long do we keep your information?
Account information is retained while your account remains active and as needed for security, legal, and operational purposes. Transfer sessions are temporary and expire after 10 minutes by default. Files are deleted after successful download, session cancellation, or expiration. Security logs and backups may persist for a limited period according to operational needs and provider retention settings.
Specific account and backup retention schedules are To be confirmed before production launch.
7. How do we keep your information safe?
We use technical and organizational safeguards intended to protect information, including authenticated account access, unique bearer tokens for transfer sessions, short session lifetimes, restricted file access, and server-side secret management. No internet transmission or storage method is completely secure, and we cannot guarantee absolute security.
Users are responsible for keeping account credentials and QR session links private and for using trusted devices and networks.
8. Do we collect information from minors?
File Drop is not directed to children under 18, or the minimum age required by local law. We do not knowingly collect personal information from children. If you believe a child has provided information, contact support@filedrop.my so we can investigate and delete it where required.
9. What are your privacy rights?
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information, and to withdraw consent. You may also have the right to complain to a data protection authority.
To request access, correction, account closure, or deletion, email support@filedrop.my. We may need to verify your identity before completing a request.
10. Controls for Do-Not-Track features
There is currently no universally accepted standard for responding to browser Do-Not-Track signals. File Drop does not currently use cross-site behavioral advertising. Where legally required, we will honor applicable opt-out preference signals such as the Global Privacy Control.
11. Do United States residents have specific privacy rights?
Residents of certain U.S. states may have additional rights, including access, correction, deletion, portability, and the right to opt out of certain sales, sharing, profiling, or targeted advertising. File Drop does not currently sell personal information or use it for targeted advertising.
| Category | Examples relevant to File Drop | Collected |
|---|---|---|
| Identifiers | Email address, account ID, IP address, session token | Yes |
| Customer records | Account and support contact information | Limited |
| Commercial information | Paid plan and transaction details | Not currently |
| Internet or network activity | Device, browser, request, and security logs | Yes |
| Geolocation | Approximate location inferred from IP address | Potentially |
| File content | Files voluntarily submitted for temporary transfer | Temporarily |
| Sensitive personal information | Not requested by File Drop | No |
Submit a request at support@filedrop.my. Authorized-agent requests may require proof of authorization. You may appeal a denied request using the same email address.
12. Do other regions have specific privacy rights?
Residents of the European Economic Area, United Kingdom, Switzerland, Canada, Australia, New Zealand, South Africa, and other regions may have additional statutory rights. File Drop will respond to valid requests as required by applicable law.
The identity and address of the legal entity acting as data controller, its representative, and any data protection officer are To be confirmed.
Service providers may process information in countries other than your own. Where required, transfers will rely on recognized safeguards such as adequacy decisions, contractual protections, or another lawful transfer mechanism.
13. Do we make updates to this notice?
We may update this Privacy Policy as File Drop changes or legal requirements develop. The revised date at the top identifies the latest version. Material changes may also be communicated through the service or by email where appropriate.
14. How can you contact us about this notice?
Email privacy questions to support@filedrop.my or visit https://filedrop.my. The legal entity name, mailing address, and jurisdiction are To be confirmed. Use of File Drop is also governed by our Terms of Service.
15. How can you review, update, or delete the data we collect?
You may request access to, correction of, or deletion of personal information by emailing support@filedrop.my. Include enough information to identify your account and request. Do not send passwords, QR tokens, or sensitive files by email.