Legal

Privacy Policy

Last updated: May 3, 2026

1. What we collect

We collect the minimum data required to operate the service:

  • Files you upload: Stored to serve your deployments. Deleted automatically when the deployment expires.
  • Account information: Email address and name, managed by Clerk (our auth provider). We do not store passwords.
  • IP addresses: Logged per page view for analytics (how many people visited your deployment). Not shared or sold.
  • User agent strings: Browser/device type, stored alongside view counts for analytics.
  • Upload metadata: File count, total size, expiry time, and the slug you chose. Stored in our database.

2. What we do not collect

  • We do not read or scan the content of your uploaded files beyond what is required for storage and serving
  • We do not use tracking cookies or third-party advertising pixels
  • We do not sell your data to anyone
  • We do not build advertising profiles

3. How we use your data

  • To serve your uploaded files to visitors
  • To show you analytics (view counts) on your deployments
  • To enforce tier limits (file size, link count, expiry)
  • To send transactional emails (expiry warnings, account notices) — only if you have an account
  • To investigate abuse reports

4. Third-party services

We use the following third-party services to operate FileVault:

  • Clerk: Authentication and account management. Your email and password are managed by Clerk. Privacy policy →
  • Railway: Hosting infrastructure. Your files are stored on Railway's platform. Privacy policy →

5. Data retention

Anonymous deployments are deleted after 24 hours. Free account deployments are deleted after 30 days. Pro deployments are retained until you delete them or cancel your subscription (after which a 30-day grace period applies). View logs are deleted when their associated deployment is deleted.

6. Your rights

You can delete any deployment at any time from your dashboard. You can delete your account by contacting us — we will remove your account and all associated deployments within 7 days. If you are in the EU or UK, you have rights under GDPR/UK GDPR including access, rectification, erasure, and portability. Contact us to exercise these rights.

7. Cookies

We use a single session cookie set by Clerk to keep you logged in. No advertising or analytics cookies are set. No third-party cookies are used.

8. Changes to this policy

We may update this Privacy Policy. Material changes will be announced on the site. Continued use after changes are posted constitutes acceptance.

9. Contact

Privacy questions or data requests: support@filevault.host