1. About this Policy
This Privacy Policy explains what personal data Uploadify ("we", "us") collects when you use https://uploadify.org/, how we use it, who we share it with, and the rights you have over your data. By using the Service, you consent to the practices described below.
2. Data We Collect
2.1 Account information
- Username, email address, hashed password
- Registration date and account preferences
- API keys issued to your account
2.2 Files and metadata
- Files you upload, their filenames, MIME types, sizes, and upload timestamps
- Share-link configuration (passwords, expiry, click counts)
2.3 Usage and technical data
- IP address, browser user-agent, and referrer URL
- Pages visited, actions taken, and timestamps
- Cookies and similar tracking technologies (see Section 7)
2.4 Payment data
When you purchase a plan, payment-card details are entered directly with our payment processor (Lemon Squeezy Inc.) and never touch our servers. We receive only a transaction reference, last 4 digits of the card, billing country, and the amount paid. For bank-transfer payments, we receive the transaction reference, sender name, and amount from our banking partner.
3. How We Use Your Data
- To provide, operate, and maintain the Service (storing, serving, and sharing your files)
- To process payments and activate plans
- To send transactional emails (account verification, payment receipts, plan-expiry reminders, password resets)
- To enforce our Terms of Service and Acceptable Use Policy
- To detect, prevent, and respond to fraud, abuse, and security incidents
- To comply with legal obligations (e.g. responses to lawful subpoenas or DMCA notices)
We do not use your data for advertising, do not sell your data, and do not share it with third-party data brokers.
4. Legal Bases (GDPR users)
- Contract — processing required to deliver the Service you purchased
- Legitimate interest — fraud prevention, security monitoring, service improvement
- Consent — optional marketing emails (you may opt out at any time)
- Legal obligation — tax records, response to law enforcement
5. Service Providers We Share Data With
We share the minimum necessary data with the following processors, all of whom are bound by data-processing agreements:
- Lemon Squeezy Inc. — payment processing and tax compliance
- Clear Bank (UK) — bank-transfer settlement (Nsave intermediary)
- Our hosting provider — server infrastructure on which your files are stored
- Email delivery provider — transactional email sending
6. International Data Transfers
Uploadify operates servers and works with vendors in multiple jurisdictions. Where personal data is transferred outside your region, we rely on Standard Contractual Clauses or equivalent safeguards, and only transfer to providers offering an adequate level of protection.
7. Cookies
We use a small number of strictly necessary cookies to keep you logged in, maintain your guest-upload session, and persist UI preferences. We do not use advertising, marketing, or third-party analytics cookies. You may disable cookies in your browser, but parts of the Service will then be unavailable.
8. Data Retention
- Files: retained for the duration of the active plan, plus a 7-day grace period after expiry, then permanently deleted.
- Account records: retained while your account is open; deleted within 30 days of account closure, except where law requires longer retention.
- Payment records: retained for 7 years to satisfy tax and audit requirements.
- Server logs: retained for up to 90 days for security and debugging.
9. Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Request a portable export of your data
- Restrict or object to specific processing
- Withdraw consent at any time, where consent is the legal basis
- Lodge a complaint with your local data-protection authority
To exercise any of these rights, email info@uploadify.org. We respond within 30 days.
10. Security
We protect your data using industry-standard measures: HTTPS encryption in transit, password hashing, access controls, isolated per-user storage directories, server-side malware scanning hooks, and protected upload directories that block direct script execution. No system is perfectly secure; we encourage you to use a strong, unique password and to enable any future multi-factor option.
11. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
12. Changes to this Policy
We may update this Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date and, where appropriate, notified by email.
13. Contact
Questions, requests, or complaints? Email our Data Protection contact at info@uploadify.org.