Privacy Policy

Last Updated: 23 November 2024

CloudExpress is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

• Account Information: When you create an account or sign in to our platform, we may collect your name, email address, and profile information. If you sign in using third-party authentication providers such as Google or Microsoft, we receive basic account information associated with your profile (such as your name and email address) as permitted by those services.
• File Transfer Information: We collect information related to files you upload or transfer through our platform, including file names, file sizes, transfer activity, and recipient email addresses to enable successful delivery and management of transfers.
• Usage and Device Information: We automatically collect certain information about how you access and interact with our service, including IP address, browser type, device type, operating system, and usage statistics.
• Communication Information: If you contact us for support or communicate with us through email or other channels, we may collect the information you provide in those communications.
• Cookies and Tracking Technologies: We may use cookies and similar technologies to improve user experience, analyze usage patterns, and maintain secure sessions. You can control cookies through your browser settings.

• To Provide Our Services: We use your information to enable file uploads, transfers, downloads, and account management on our platform.
• To Facilitate File Transfers: Email addresses and transfer details are used to send notifications, delivery links, and updates related to file transfers between users and recipients.
• To Authenticate Users: If you sign in using third-party providers such as Google or Microsoft, we use the basic account information provided by these services to authenticate your identity and allow secure access to your account.
• To Improve Our Services: We analyze usage data and platform interactions to improve performance, reliability, user experience, and develop new features.
• To Maintain Security: Information such as IP address and device data helps us detect, prevent, and respond to fraudulent activity, abuse, and unauthorized access.
• Data Processing for File Content: We do not access, review, or analyze the contents of files you upload except where necessary to maintain the security and integrity of the service or when required by law.
• To Communicate With You: We may use your email address to send important service notifications, updates, support responses, and information related to your file transfers.

• Contractual Necessity: Processing your information is necessary to provide file transfer services and manage your account.
• Legitimate Interests: We may process certain data to improve our services, maintain platform security, and prevent fraud.
• Consent: In some cases, we process data based on your consent, such as when you choose to sign in with third-party authentication providers.
• Legal Obligations: We may process data when required to comply with applicable laws and regulations.

• Service Providers: We may share limited information with trusted third-party service providers who help us operate and maintain our platform. These providers assist with services such as hosting, infrastructure, analytics, and email delivery, and are only permitted to use the information as necessary to perform their services.
• Payment Processing: If you make a purchase or subscribe to a paid plan, your payment information is processed securely by our payment processor, Stripe. We do not store or have direct access to your full payment card details. Stripe may collect and process payment information in accordance with its own privacy policy. Take a look at Stripe's privacy policy here: https://stripe.com/privacy
• Authentication Providers: If you choose to sign in using third-party authentication providers such as Google or Microsoft, certain account information may be shared with those providers as required to complete the authentication process.
• Legal Requirements: We may disclose information if required to do so by law, regulation, legal process, or governmental request, or when we believe such disclosure is necessary to protect our rights, users, or the security of our platform.
• We do not sell your personal information to third parties for marketing or advertising purposes.

• Data Protection Measures: We use encryption, firewalls, and other advanced security technologies to protect your personal information and uploaded files from unauthorized access.
• Transmission Security: While we implement industry-standard safeguards to protect your data, no method of transmission over the internet or electronic storage is completely secure.

• Automatic File Expiration: Uploaded files are automatically deleted once the selected expiration period for the transfer is reached.
• Manual File Management: Users may manually delete or expire their uploaded files at any time after upload through their account or transfer management options.
• Account Data Removal: If a user deletes their account, associated personal data and records are removed from our systems, subject to any legal obligations requiring limited data retention.
• User Control: Users retain control over their uploaded files and may manage, download, or delete them through their account settings.
• Secure Access: Uploaded files are accessible only through secure links generated by the service.

• Account Deletion Request: Users may request the deletion of their account through their account settings.
• Immediate Account Disablement: Once a deletion request is submitted, the account will be disabled and access to the account will be restricted.
• Scheduled Permanent Deletion: The account and associated data will be scheduled for permanent deletion after 60 days.
• Account Recovery Period: During the 30-day period, users may request an account recovery email to restore access.
• Final Data Removal: After the 30-day period, the account and all associated data, including uploaded files and records, will be permanently deleted from our systems.

• Access and Update Your Information: You have the right to access, review, and update the personal information associated with your account at any time through your account settings.
• Request Deletion: You may request the deletion of your account and associated personal information, subject to any legal or operational obligations that require us to retain certain data.
• Data Portability: Where applicable, you may request a copy of the personal information we hold about you in a structured and commonly used format.
• Withdraw Consent: If you have provided consent for certain data processing activities, you may withdraw that consent at any time, although this may affect your ability to use certain features of our service.
• Opt-Out of Communications: You may opt out of receiving non-essential communications from us by following the unsubscribe instructions included in our emails or by adjusting your account preferences.
• Right to Lodge a Complaint: If you believe that your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority.
• Contact Us: If you wish to exercise any of these rights or have questions regarding your personal data, you may contact us using the information provided in the “Contact Us” section of this policy.

Our services are intended for individuals who are at least 16 years of age. We do not knowingly allow individuals under the age of 16 to create accounts or use our platform.

During the registration process, users must confirm that they are at least 16 years of age. By selecting the age confirmation and creating an account or using our services, you acknowledge that you meet this age requirement. If a user accepts this confirmation and registers using false or inaccurate information, including misrepresenting their age as being 16 or older when they are not, the responsibility for providing such incorrect information rests entirely with the individual who submitted it.

We do not knowingly collect personal data from children under the age of 16. If we become aware that personal data has been collected from a child under the age of 16 without appropriate parental consent, we will take reasonable steps to delete such information from our systems promptly. If you believe that a child under the age of 16 may have provided personal data through our platform, please contact us so that we can investigate and take appropriate action.

If you believe that a child under the age of 16 may have provided personal data through our platform, please contact us so that we can investigate and take appropriate action.

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. When we make updates, the revised version will be posted on this page with an updated effective date.

If the changes are significant, we may provide additional notice through our website or by sending a notification to the email address associated with your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information.

For questions or concerns about this Privacy Policy, contact us at [email protected]