Privacy Policy

At VuTransfer, privacy isn't just a feature—it's our foundation. We've built our entire platform around the principle that your data belongs to you and you alone.

Account Information

When you create an account, we collect:

• Email address (for account creation and communication)
• Encrypted password hash (we never store plain text passwords)
• Account creation date and last login time

Service Usage Information

To provide and improve our service, we collect:

• Transfer metadata (file names, sizes, upload dates, expiration dates)
• Download counts and access timestamps
• Storage usage statistics
• Basic error logs for troubleshooting

What We DON'T Collect

VuTransfer is built with a zero-knowledge architecture, meaning we literally cannot access the contents of your files, even if we wanted to or were legally compelled to do so.

How It Works

This means that even in the unlikely event of a data breach, your files remain protected because they're encrypted with keys that we don't have access to.

We use the limited data we collect solely to:

• Provide the service: Account management, file transfer functionality, and storage
• Ensure security: Fraud prevention, abuse detection, and system security
• Improve performance: System optimization and reliability improvements
• Customer support: Responding to your inquiries and troubleshooting issues
• Legal compliance: Meeting our legal obligations and protecting rights

We do not sell, rent, or trade your personal information. We may share limited data only in these specific circumstances:

Service Providers

We work with trusted third-party service providers who help us operate our platform:

• Backblaze B2 (encrypted file storage)
• Cloudflare (CDN and security services)
• Supabase (database and authentication)

These providers are contractually bound to protect your data and cannot access your encrypted files.

Legal Requirements

We may disclose information when required by law, such as:

• Valid legal process (subpoenas, court orders)
• Protection of rights, property, or safety
• National security requirements

However, due to our zero-knowledge architecture, we cannot provide access to your encrypted files even under legal compulsion.

Security is built into every aspect of VuTransfer. We implement multiple layers of protection to keep your data safe.

Technical Protections

• Cloudflare bot protection blocks AI crawlers and scrapers
• Terms of service explicitly prohibit AI training use
• Zero-knowledge architecture prevents access to file contents
• No content analysis or scanning of uploaded files

We believe your creative work, documents, and personal files should remain private and should never be used to train systems that could potentially compete with or replicate your work.

File Data

• Files are automatically deleted when transfers expire
• You can manually delete transfers at any time
• Deleted files are permanently removed from our systems within 30 days
• No file recovery is possible after deletion due to encryption

Account Data

• Account information is retained while your account is active
• You can delete your account at any time
• Account data is deleted within 90 days of account closure
• Some metadata may be retained for legal compliance (e.g., billing records)

Logs and Analytics

• System logs are retained for 30 days for troubleshooting
• Security logs may be retained for up to 1 year
• Aggregated, anonymized usage statistics may be retained indefinitely

You have comprehensive control over your data. We provide these rights regardless of your location:

To exercise these rights, contact us at privacy@vutransfer.com. We'll respond within 30 days and help you with any privacy-related requests.

We use minimal cookies and tracking technologies, only what's necessary for the service to function.

Essential Cookies

• Authentication tokens to keep you logged in
• Session cookies for security and functionality
• CSRF protection tokens

What We Don't Use

We carefully select third-party services that align with our privacy principles:

VuTransfer operates globally, and your encrypted data may be stored in multiple jurisdictions for redundancy and performance.

Transfer Safeguards

• All data is encrypted before any international transfer
• We use appropriate safeguards for cross-border data flows
• Our service providers comply with international privacy standards
• You maintain the same privacy protections regardless of data location

Because of our zero-knowledge architecture, the physical location of your encrypted data doesn't compromise your privacy—only you can decrypt it.

VuTransfer is not intended for children under 18. We do not knowingly collect personal information from minors.

If we become aware that we have collected personal information from someone under 18, we will delete that information immediately. If you believe a minor has provided us with personal information, please contact us at privacy@vutransfer.com.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Email notification to registered users
• Prominent notice on our website
• In-app notifications for major changes

Continued use of the service after changes constitutes acceptance of the updated policy. However, we will never change our core privacy commitments without your explicit consent.

If you have questions about this Privacy Policy or our privacy practices, please contact us:

We take privacy inquiries seriously and will respond to your request as quickly as possible. For urgent security matters, please use security@vutransfer.com.