Privacy Policy

This Privacy Policy explains what information fileaway ("fileaway", "we", "us") collects when you use our website and application (the "Service"), how we use it, and the choices you have. By using the Service you agree to this Policy.

1. Information we collect

Account information. When you sign up, we collect the email address you provide, a hashed password (for password-based accounts), and a unique account identifier. If you sign in with Google or GitHub, we receive the basic profile information those providers return to us (such as your email, name, and provider user ID).

Saved items. When you save a link, we store the URL you submitted, the platform it came from, a category our system assigns, the content we retrieved from the link (such as captions or transcripts), structured data extracted by AI from that content, and metadata such as timestamps and processing status.

Usage data. We collect information about how you interact with the Service, including pages viewed, features used, approximate location derived from IP address, device and browser type, referring page, and performance metrics. This is collected through analytics providers including PostHog and Vercel Analytics / Speed Insights.

Cookies and similar technologies. We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, and measure usage. You can control cookies through your browser settings; disabling them may break parts of the Service (for example, you may not be able to stay signed in).

Communications. If you contact us, we keep a record of the correspondence and any information you choose to share.

2. How we use your information

• To provide, operate, and maintain the Service, including authenticating you, retrieving content from the URLs you submit, running AI categorization and extraction, and storing the results in your account.
• To secure the Service, prevent fraud and abuse, and enforce our Terms.
• To understand how the Service is used so we can improve it.
• To respond to your support requests and other communications.
• To comply with legal obligations and protect our rights and the rights of others.

Where required by law, we rely on the following legal bases: performance of a contract with you, our legitimate interests in operating and improving the Service, your consent (where you have given it), and compliance with legal obligations.

3. AI processing

When you save a link, the content retrieved from that link is sent to third-party AI providers (currently Google's Gemini models) to be categorized and to produce structured output. We do not use your saved-item content to train AI models. The AI providers process the content under their own terms and may temporarily retain it for abuse monitoring as described in their policies.

4. Service providers we use

We share information with the following categories of providers strictly to operate the Service. They process data on our behalf under contractual confidentiality and security obligations:

• Convex — database, authentication, and serverless backend hosting.
• Vercel — application hosting, analytics, and performance monitoring.
• Apify — retrieves publicly available content from social media URLs you submit.
• Google (Gemini API) — AI categorization and extraction.
• Google and GitHub — optional OAuth sign-in providers, if you choose to use them.
• PostHog — product analytics.

Each provider operates under its own privacy policy. We may add or change providers from time to time and will update this Policy when we do.

5. Sharing of information

We do not sell your personal information. We share it only:

• With the service providers listed above, to run the Service.
• When you direct us to (for example, by using a feature that shares a saved item).
• To comply with law, valid legal process, or a lawful government request.
• To protect the rights, property, or safety of fileaway, our users, or others, or to investigate fraud or violations of our Terms.
• In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to confidentiality.

6. Data retention

We retain your account information for as long as your account is active. Saved items are retained until you delete them or delete your account. We may retain limited information for longer when needed to comply with legal obligations, resolve disputes, enforce our agreements, or maintain security. Backups and logs may persist for a limited period after deletion.

7. Your rights and choices

Depending on where you live, you may have rights under laws such as the EU/UK GDPR or the CCPA, including the right to access, correct, delete, port, or restrict processing of your personal information, the right to object to processing, and the right to withdraw consent. To exercise these rights, contact us at the address below. You can also:

• Update your email or password from your account settings.
• Delete saved items individually from the Service.
• Request deletion of your account by emailing us.
• Disconnect Google or GitHub from your account by revoking access in the relevant provider.

We will respond to verifiable requests within the time required by applicable law. You may also lodge a complaint with your local data protection authority.

8. Security

We use reasonable technical and organizational measures to protect your information, including transport-layer encryption, hashed credentials, and access controls. No system is perfectly secure; we cannot guarantee that unauthorized parties will never gain access to your information.

9. International transfers

fileaway and its service providers may process your information in countries other than the one in which you live. Where required, we rely on appropriate safeguards such as standard contractual clauses to protect your information during cross-border transfers.

10. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.

11. Third-party links

The Service displays links to and information about third-party content on platforms we do not operate. We are not responsible for the privacy practices of those platforms. Review their privacy policies before interacting with them.

12. Changes to this Policy

We may update this Policy from time to time. When we do, we will update the "Last updated" date above and, for material changes, take reasonable steps to notify you, such as posting a notice in the Service or sending you an email. Your continued use of the Service after a change takes effect means you accept the updated Policy.

13. Contact

For questions, requests, or complaints about this Policy or your information, contact us at privacy@fileaway.app.