Privacy Policy

1. Introduction

This Privacy Policy explains how SpaceCloud ("SpaceCloud," "we," "us," or "our") collects, uses, discloses, and safeguards information when you use our file hosting website and services (the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Service. This policy should be read together with our Terms of Service.

2. Data we collect

2.1 Information you provide

• Account information: if you create an account, we collect your email address and password (stored in hashed form).
• Uploaded files: the content of any file you upload to the Service.
• Payment information: if you subscribe to a paid plan, payment details are collected and processed by our third-party payment provider — SpaceCloud does not store full card numbers.
• Communications: any information you provide when contacting our support team.

2.2 Information collected automatically

• Usage data: IP address, browser type, device information, and pages visited.
• File access logs: timestamps of when a file is uploaded or downloaded, used to determine file retention status (see Section 7).
• Cookies and similar technologies: as described in Section 5.

3. How we use your data

We use the information we collect to:

• Provide, operate, and maintain the Service, including generating and serving download links.
• Determine which files are inactive and eligible for removal under our retention policy.
• Process transactions for paid plans.
• Send service-related notifications, including file-expiration warnings.
• Detect, prevent, and address abuse, fraud, or violations of our Terms of Service.
• Improve and analyze the performance of the Service.
• Comply with legal obligations, including responding to lawful requests from public authorities.

4. Legal basis for processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases, as applicable:

• Performance of a contract: to provide the Service you requested, such as hosting and serving your uploaded files.
• Legitimate interests: to secure the Service, prevent abuse, and improve functionality, provided these interests are not overridden by your rights.
• Consent: where required, such as for certain cookies or marketing communications, which you may withdraw at any time.
• Legal obligation: where processing is necessary to comply with applicable law.

5. Cookies and tracking

We use cookies and similar technologies to operate the Service, remember your preferences, and measure how the Service is used. This may include:

• Essential cookies: required for core functionality, such as session management.
• Analytics cookies: used to understand usage patterns and improve the Service.
• Advertising cookies: used by our advertising partners to serve and measure ads on file-download pages, as described in Section 6.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

6. Advertising and third parties

The Service displays advertisements on download and file-access pages, served by third-party advertising networks. These networks may use cookies, device identifiers, or similar technologies to serve relevant ads and measure their performance.

SpaceCloud does not control the privacy practices of third-party advertising networks. We encourage you to review their respective privacy policies. Where required by applicable law, we will provide mechanisms for you to manage your advertising preferences.

7. File metadata and retention

To operate our storage system, we retain metadata associated with each uploaded file, including a unique file identifier, file size, upload timestamp, and the timestamp of last access (last_accessed_at).

This metadata is used specifically to determine whether a file has been inactive for twelve (12) consecutive months, in which case it becomes eligible for automatic deletion in accordance with our Terms of Service. Accessing a file resets this inactivity period.

We do not scan, analyze, or use the contents of your uploaded files for advertising or profiling purposes.

8. Data sharing and disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Service providers: including cloud storage infrastructure providers, payment processors, and advertising networks, solely to operate the Service.
• Legal compliance: where required to comply with applicable law, legal process, or governmental request, including reports related to child sexual abuse material (CSAM) to appropriate authorities such as NCMEC.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.
• Protection of rights: to protect the rights, property, or safety of SpaceCloud, our users, or the public.

9. Data security

We implement reasonable technical and organizational measures designed to protect your information, including encrypted transmission and access controls on stored data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International data transfers

Because our infrastructure providers operate data centers across multiple regions, your information, including uploaded files, may be transferred to and processed in countries other than your country of residence. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect data transferred internationally.

11. Your rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data, subject to legal exceptions.
• Portability: request a copy of your data in a structured, machine-readable format.
• Objection and restriction: object to or request restriction of certain processing activities.
• Withdrawal of consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, please contact us via our Contact page. We may need to verify your identity before fulfilling certain requests.

12. Additional rights for California residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights regarding your personal information, including:

• The right to know what categories of personal information we have collected, used, or disclosed about you in the preceding 12 months.
• The right to request deletion of personal information we have collected from you.
• The right to opt out of the sale or sharing of personal information, if applicable.
• The right to non-discrimination for exercising any of your CCPA rights.

SpaceCloud does not sell personal information as defined under the CCPA. To exercise your rights, please contact us via our Contact page.

13. Children's privacy

The Service is not directed to children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

14. Data retention

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Uploaded files and their associated metadata are retained in accordance with the inactivity-based retention policy described in Section 7 and our Terms of Service.

Account information is retained until you request deletion of your account, subject to any legal retention requirements.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will make reasonable efforts to notify users of material changes, such as by posting a notice on the Service or updating the "Last updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

16. Contact

If you have questions about this Privacy Policy or wish to exercise any of your data rights, please reach out through our Contact page.