Privacy policy.

SendFast ("we", "our", "us") operates sendfast.raicode.tech and associated domains. This Privacy Policy explains how we collect, use, and protect your information.

Zero-knowledge architecture

SendFast is built on a zero-knowledge model. All files are encrypted client-side using AES-256-GCM before they are uploaded. The encryption key is embedded in the URL fragment (#key=…) and is never transmitted to our servers. We cannot read your files.

Information we collect

We collect the minimum necessary to operate the service:

• Account data — name and email address when you sign up.
• Transfer metadata — file name, size, MIME type, expiry date, download count. Not file content.
• Usage data — pages visited, features used (via privacy-preserving analytics).
• Payment data — handled entirely by Stripe. We store only your Stripe customer ID and subscription status.
• IP addresses — retained briefly for abuse prevention, not linked to transfers.

How we use your information

• Deliver the file transfer service and manage your account.
• Process payments and manage subscriptions via Stripe.
• Send transactional emails (transfer notifications, receipts).
• Prevent abuse, fraud, and illegal use.
• Improve the service through aggregate, anonymised analytics.

Data storage and retention

• Encrypted files are stored on our servers for the duration of the transfer expiry (7 days free, up to 90 days Pro), then permanently deleted.
• Transfer metadata is retained for 12 months for billing and audit purposes, then deleted.
• Account data is retained while your account is active. You may request deletion at any time.

Third-party services

• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• MinIO / S3-compatible storage — encrypted file storage hosted on our infrastructure.
• OpenPanel — privacy-preserving, cookieless analytics. No personal data shared.

Cookies

We use only essential session cookies for authentication. We do not use advertising or tracking cookies.

Your rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Export your data in a machine-readable format.
• Withdraw consent at any time.

To exercise these rights, email us at [email protected].

Data transfers

SendFast operates servers within the EU/EEA. If you access the service from outside the EU, your data may be transferred internationally. We rely on Standard Contractual Clauses where required by GDPR.

Children

SendFast is not directed at children under 13. We do not knowingly collect data from children.

Changes to this policy

We may update this policy. Material changes will be notified by email or a prominent notice on the site. Continued use after changes constitutes acceptance.

Contact

Questions? Email [email protected].