Privacy Policy

1. Information we collect

We collect only the information needed to provide the service.

Account information

When you create an account, we may collect:

• Your name
• Your email address

File request information

When you create or receive a file request, we may collect:

• Names and email addresses provided by the request creator
• Request details such as title, expiry date, and settings

Uploaded files

Files uploaded to filxo are stored only to provide the service.

We do not access, read, or review the contents of uploaded files.

Usage information

We collect limited technical information such as:

• IP address
• Browser type
• Date and time of actions

This information is used to operate, secure, and improve the service.

2. How we use information

We use the information we collect to:

• Provide and operate the filxo service
• Deliver file requests and notifications
• Track upload activity and request status
• Maintain security and prevent abuse
• Communicate with you about service-related matters

We do not sell personal data.

3. File access and privacy

• Uploaded files are accessible only to the request owner and intended recipients.
• Each request uses a unique access link.
• Requests expire automatically based on the selected settings.
• Once a request expires, uploads are no longer accepted.

filxo does not use uploaded files for analytics, training, or marketing purposes.

4. Data retention

We retain personal data and uploaded files only for as long as necessary to provide the service.

• Files are retained based on request expiry and user actions.
• Account information is retained while your account remains active.
• We may retain limited records for security, legal, or operational reasons.

5. Data sharing

We do not share personal data with third parties except:

• When required to operate the service, such as cloud hosting and email delivery providers
• When required by law

All service providers are required to handle data in accordance with this Privacy Policy.

6. Security

We take reasonable measures to protect personal data, which may include:

• Encryption in transit and at rest
• Access controls
• Activity logging
• Rate limiting and abuse prevention

No system is completely secure, but we design filxo with security and minimal data exposure in mind.

7. Your choices and rights

You may:

• Access and update your account information
• Delete requests and files you control
• Contact us to request account deletion

GDPR and UK GDPR rights

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) and UK GDPR:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Request limitation of how we process your data
• Right to data portability: Request transfer of your data to another service
• Right to object: Object to processing of your data for certain purposes
• Right to withdraw consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected]. We will respond within one month.

8. Legal basis for processing (GDPR/UK GDPR)

For users in the EEA and UK, we process personal data based on the following legal bases:

• Contractual necessity: To provide the filxo service you requested
• Legitimate interests: To maintain security, prevent abuse, and improve the service
• Consent: Where you have provided explicit consent (e.g., email notifications)
• Legal obligation: To comply with applicable laws and regulations

9. International use and data transfers

filxo may process data using infrastructure located in different countries. When we transfer personal data from the EEA or UK to countries outside these regions, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Other legally recognized transfer mechanisms

By using filxo, you consent to the transfer of your data to countries that may have different data protection laws than your country of residence.

10. Changes to this policy

We may update this Privacy Policy from time to time.

If we make material changes, we will update the date at the top of this page. For significant changes affecting users in the EEA or UK, we will provide additional notice as required by law.

11. Contact us

If you have questions about this Privacy Policy or how data is handled, contact:

Email: [email protected]

Data Protection Officer: For GDPR/UK GDPR inquiries, you may also contact our Data Protection Officer at the same email address.

Supervisory Authority: If you are in the EEA or UK and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.