Privacy Policy

This policy applies to the FiloSpace website and file-management application. The operator is [legal entity name — configure before launch]. FiloSpace acts on account and service information needed to run the product. You decide what files to upload and who receives a share link.

• Account information: name, email address, authentication identifiers, and profile details you provide.
• Uploaded content: the files you choose to store and generated copies you ask FiloSpace to create.
• File metadata: file names, types, sizes, folders, tags, timestamps, storage keys, favorites, processing state, and sharing settings.
• Service activity: actions such as uploads, downloads, folder changes, link creation, processing jobs, and rate-limit events.
• Technical information: information routinely present in requests and infrastructure logs, such as time, browser or device information, and network data.
• Google sign-in information: if you choose Google, FiloSpace receives the account details Google makes available for authentication, such as your email, name, and profile image where provided.

FiloSpace uses this information to:

• create and authenticate your account;
• upload, organize, process, download, and share files at your request;
• apply storage, file-size, security, and rate limits;
• show activity and file status inside your workspace;
• diagnose failures, protect the service, and respond to support requests; and
• meet applicable legal obligations and enforce the service terms.

The current application does not include advertising or behavioral analytics code, and uploaded file contents are not used to build advertising profiles.

File contents are stored as private objects in Amazon S3. File metadata and account data are stored in Supabase PostgreSQL. The browser uploads to and downloads from S3 using time-limited signed URLs issued only after server-side authorization checks.

Files remain private to the account owner unless the owner creates a share link. A valid, unexpired, non-revoked share link lets its holder access the linked item. Do not send a share link to someone who should not have access.

Information is shared with infrastructure providers needed to operate FiloSpace, listed on the Subprocessors page. This currently includes Supabase for authentication and database services, AWS for object storage, and Google only when you choose Google sign-in.

FiloSpace may also disclose information when reasonably necessary to comply with law, respond to valid legal process, protect users or the service, or complete a business transaction subject to appropriate handling of the information.

FiloSpace does not sell personal information or share it for cross-context advertising.

Service providers may process operational data in countries other than your own. The current S3 bucket is configured in AWS region Europe (Stockholm), eu-north-1. That configuration does not mean every category of account, authentication, support, or infrastructure data stays in that region.

Provider terms and legally recognized safeguards may apply to international transfers. See the Subprocessors page for provider documentation.

Account information and stored files are kept while the account is active and as needed to provide the service. Deleting a file revokes its share links and removes it from the workspace immediately. The stored object is kept for a short grace period, long enough to undo the deletion, and is then permanently removed: the S3 object is deleted before its database record.

FiloSpace does not currently promise a fixed account-deletion period. Activity records remain until cleared through the product or removed as part of service administration. Limited information may need to be retained where required by law, needed to resolve disputes, prevent abuse, or present in provider backups subject to the provider's lifecycle.

To request account-level deletion or access that is not available in the product, email support@filospace.online.

Depending on where you live and which law applies, you may be able to ask for access, correction, deletion, restriction, portability, or other action concerning personal information. FiloSpace may need to verify your identity and may deny or limit a request where the law permits.

FiloSpace uses private-by-default object storage, signed access URLs, authenticated server operations, ownership checks, PostgreSQL row-level security, and file validation. More detail is available on the Security page.

No system can guarantee absolute security. If FiloSpace becomes aware of an incident affecting personal information, it will investigate, contain the issue where possible, and make notices required by applicable law.

FiloSpace is a general file-management service and is not directed to children. Do not create an account if you cannot legally agree to the Terms in your location. If you believe a child has provided personal information without appropriate authorization, contact us.

This policy may change when the product, providers, or legal requirements change. The date at the top will be updated, and material changes will be communicated in an appropriate way.

Privacy requests can be sent to support@filospace.online. Include the email address connected to your account and the request you want us to review.