Privacy Policy

SendFlick ("we", "us", "our") is the data controller responsible for your personal data. You can contact us at: hello@sendflick.com.

We collect and process the following categories of personal data:

• Account data: Email address, name, password (hashed) when you register.
• Transfer data: File metadata (name, size, type), recipient email addresses, optional messages.
• Usage data: IP address, browser type, pages visited, download counts, view counts.
• Payment data: Billing information processed securely by Stripe. We never store card details.
• Cookies: Essential session cookies and, with your consent, analytics cookies.

• Contract performance: To provide the file transfer service you requested.
• Legitimate interests: To prevent abuse, ensure security, and improve our service.
• Consent: For optional analytics cookies (you can withdraw at any time).
• Legal obligation: To comply with applicable laws and regulations.

• To provide and maintain the file transfer service.
• To send email notifications about your transfers (e.g., when a recipient downloads).
• To process payments via Stripe.
• To detect and prevent fraud or abuse.
• To improve our platform based on usage patterns (only with your consent).

Uploaded files are stored securely on Dropbox servers, which may be located in the United States. Dropbox is certified under the EU-U.S. Data Privacy Framework. Files are automatically and permanently deleted from our servers once a transfer expires.

Payment processing is handled by Stripe, Inc. (US). Stripe is certified under the EU-U.S. Data Privacy Framework and complies with PCI-DSS standards.

• Transferred files: Deleted automatically when the transfer expires (7 days for free, 30 days for Pro, unlimited for Business).
• Account data: Retained for the duration of your account. Deleted within 30 days of account deletion upon request.
• Usage logs: Retained for up to 90 days for security and fraud prevention.

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to data portability: Receive your data in a machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw cookie consent at any time.

To exercise any of these rights, contact us at hello@sendflick.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

We use essential cookies that are strictly necessary for the service to function (e.g., authentication sessions). We also use analytics cookies to understand how the platform is used — these are only set with your explicit consent via our cookie banner.

You can withdraw your consent at any time by clearing your browser cookies and declining when the banner reappears.

SendFlick is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at hello@sendflick.com.

We may update this Privacy Policy from time to time. We will notify registered users by email and update the "Last updated" date above. Continued use of the service after changes constitutes acceptance of the updated policy.

For any privacy-related questions or requests, please contact us at: hello@sendflick.com