Privacy Policy
Last updated: July 6, 2025
Introduction
At FileCruise, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our file hosting service.
Our Privacy Promise
We use zero-knowledge architecture, meaning we cannot access your encrypted files or personal data stored within them.
Information We Collect
Account Information
When you create an account, we collect:
- Username and email address
- Encrypted password (we never store plaintext passwords)
- Account creation date and last login
- Subscription plan and billing information (if applicable)
Usage Data
We automatically collect certain information about your use of our service:
- Storage usage and file metadata (size, type, upload date)
- IP address and general location (country/region)
- Browser type and device information
- Access logs and service usage statistics
File Data
Zero-Knowledge File Storage
Your files are encrypted with AES-256-GCM in your browser before upload. We store only encrypted data and cannot access your file contents.
How We Use Your Information
We use the collected information for the following purposes:
- Service Provision: To provide, maintain, and improve our file hosting service
- Account Management: To manage your account and subscription
- Communication: To send important service updates and notifications
- Security: To protect against fraud and ensure service security
- Analytics: To understand usage patterns and improve our service
- Legal Compliance: To comply with applicable laws and regulations
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information only in these limited circumstances:
4.1 Service Providers
We may share data with trusted service providers who assist us in operating our service, such as:
- Cloud hosting providers (for encrypted file storage)
- Payment processors (for subscription billing)
- Analytics providers (for usage statistics)
4.2 Legal Requirements
We may disclose information when required by law or to:
- Comply with legal process or government requests
- Protect our rights, property, or safety
- Prevent fraud or security threats
Important Note
Due to our zero-knowledge encryption, we cannot access your file contents even if legally required to do so.
5. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: AES-256-GCM encryption for all files, TLS for data transmission
- Access Controls: Multi-factor authentication and role-based access
- Infrastructure: Secure European data centers with 24/7 monitoring
- Backups: Encrypted backups with geographic redundancy
- Auditing: Regular security audits and penetration testing
6. Your Rights Under GDPR
As a European-hosted service, we fully comply with GDPR. You have the following rights:
- Right to Access: Request copies of your personal data
- Right to Rectification: Correct inaccurate personal data
- Right to Erasure: Request deletion of your personal data
- Right to Portability: Transfer your data to another service
- Right to Object: Object to processing of your personal data
- Right to Restriction: Restrict processing of your personal data
To exercise these rights, contact us at [email protected].
7. Cookies and Tracking
We use essential cookies and similar technologies to:
- Maintain your login session and authentication
- Remember your preferences and settings
- Analyze site performance and usage patterns
- Prevent fraud and enhance security
You can manage cookie preferences in your browser settings. See our Cookie Policy for detailed information.
8. Data Retention
We retain your information for as long as necessary to provide our services:
- Account Data: Until account deletion or service termination
- Files: According to your plan's retention policy
- Logs: Up to 12 months for security and debugging purposes
- Billing Data: As required by tax and accounting regulations
9. International Data Transfers
Your data is stored and processed within the European Union. If data must be transferred outside the EU, we ensure appropriate safeguards are in place through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
- Additional security measures and encryption
10. Children's Privacy
FileCruise is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Email notification to registered users
- Prominent notice on our website
- In-app notifications
Continued use of our service after changes take effect constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Privacy-First Commitment
This Privacy Policy was last updated on July 6, 2025. Version 1.0