Privacy Policy

We use the collected information for the following purposes:

• To provide and maintain the Service
• To manage your account and subscription
• To prevent fraud and abuse
• To analyze and improve the performance of our Service
• To communicate with you about service updates or support requests

Legal bases: We process account and billing data to perform our contract with you; we process operational security logs for legitimate interests; and we process optional analytics data based on consent.

File Content: Your files are processed entirely in your browser and are not uploaded to our servers for processing. In the normal workspace flow, file contents are intended to stay only for the current tab session. Your processing preferences (such as output format and options) are saved locally in your browser so they persist between visits. If you use the PWA share target, shared files may be temporarily stored in your browser's local storage until you reopen the app and it finishes importing them. You can clear saved preferences from the workspace at any time.

Account Data: We retain your account information as long as your account is active or as needed to comply with legal obligations.

Retention windows: Usage telemetry is retained for up to 24 months, webhook audit data for up to 12 months, and completed privacy-request records for up to 36 months unless a longer period is required by law.

We use trusted third-party service providers to assist in operating our Service:

• Supabase + Stripe: For authentication, billing, and subscription management.
• PostHog: For product analytics (usage patterns, error tracking).
• Vercel: For hosting and infrastructure.

These providers have access to personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Where data is transferred internationally, we rely on contractual safeguards (including SCC/UK transfer addenda as applicable) and vendor security controls.

Depending on your location, you may have rights regarding your personal data, including:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate data.
• Right to Deletion: Request deletion of your personal data ("Right to be Forgotten").
• Right to Restrict Processing: Request limitation on how we use your data.
• Right to Data Portability: Request transfer of your data to another service.

To exercise these rights, submit a request in-app from account settings or contact us at privacy@files2.ai.

We target an initial response within 30 days and will notify you if an extension is required.

Our Service is not intended for use by children under the age of 16 in the EU/UK context (or under 13 in the U.S.). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete it.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

If you have any questions about this Privacy Policy, please contact us: