WarpSend ("we", "our", "us") respects your privacy. This Privacy Policy explains what personal data we collect when you use WarpSend, how we use it, and the rights you have over it. It applies to our website (warpsend.io), the WarpSend desktop and NAS applications, and all related services (collectively, the "Service").
1. Personal data we collect
We collect the following categories of personal data:
- Account data — name, email address, hashed password, and any organization details you provide when you sign up.
- Billing data — payment method information (handled by our payment processor), billing address, and invoice history. Full card numbers are never stored on our servers.
- Usage data — aggregate metrics such as bytes transferred, storage consumed, transfer counts, device types, and app version. We use this to enforce quotas, prevent abuse, and improve the Service.
- Communication data — messages you send through our support channels or contact forms.
- Technical data — IP address, user agent, and the basic server logs needed to operate the Service securely.
We do not read or store the contents of files you transfer through WarpSend. End-to-end encryption ensures that only you and your intended recipients can access file content. Files held in our cloud relay for share-link delivery are encrypted at rest with AES-256 and removed according to the retention rules in our Terms of Service.
2. How we use your data
We use personal data to:
- Provide, operate, and maintain the Service.
- Authenticate you and protect your account.
- Process payments and prevent fraud.
- Enforce free quotas and PAYG billing.
- Respond to support requests.
- Send transactional emails (account confirmations, billing receipts, security notices). We do not send marketing emails without your consent.
- Comply with legal obligations and respond to lawful requests.
3. Cookies and similar technologies
We use cookies and similar technologies sparingly. We do not use advertising cookies or marketing pixels.
Strictly necessary cookies are required for core functionality — for example, authentication and session management when you sign in to the Service or to our admin tools, and CSRF tokens that protect form submissions. You can disable cookies in your browser, but doing so may break parts of the Service.
Analytics: we use a privacy-friendly analytics tool to understand aggregate traffic patterns on warpsend.io. The tool we use is cookieless — it does not store identifiers in your browser, does not fingerprint visitors, and does not share visitor data with advertisers. Aggregated metrics like page views, referrer hostnames, and device categories help us improve the site.
No third-party trackers: we do not load Google Analytics, Meta Pixel, LinkedIn Insight Tag, or any similar advertising or marketing tracker on this website.
4. Lawful bases (EEA / UK users)
If you are in the European Economic Area or the United Kingdom, we process your data on the following lawful bases:
- Contract performance — to deliver the Service you signed up for.
- Legitimate interests — to keep the Service secure, prevent abuse, and improve features.
- Consent — for any optional processing, such as marketing communication.
- Legal obligation — where required by tax, accounting, or other applicable law.
5. How long we keep your data
- Account data is kept while your account is active and for up to 12 months after deletion, so an accidentally deleted account can be recovered.
- Billing records are kept for 7 years to comply with tax and accounting laws.
- File content is held only as long as its retention rule applies: 7 days for free-tier share links, and until manually deleted or PAYG cancellation for paid links.
- Server logs are kept for up to 90 days unless required longer to investigate a security incident.
6. Sharing your data
We do not sell your personal data. We share data only with:
- Sub-processors that help us run the Service: cloud infrastructure (Cloudflare), payment processing, transactional email delivery, and customer support tooling. These providers are bound by data-processing agreements.
- Authorities, when required by law or valid legal process.
- Acquirers, if we are involved in a merger, acquisition, or sale of assets — in which case we will notify you before your data is transferred.
7. International transfers
Our infrastructure runs on globally distributed servers. When data crosses borders we rely on legally recognized transfer mechanisms (including Standard Contractual Clauses) to maintain a level of protection equivalent to the laws of your home country.
8. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and associated data.
- Export your data in a machine-readable format.
- Object to or restrict certain processing.
- Withdraw consent at any time.
To exercise any of these rights, email us at privacy@warpsend.io. We respond within 30 days.
9. Security
We protect your data with:
- HTTPS/TLS for all client–server communication.
- End-to-end encryption for file transfers — keys never leave your devices in unencrypted form.
- AES-256 encryption at rest for files held in our cloud relay.
- Strict access controls for our internal systems.
- Regular security reviews and incident-response procedures.
No system is perfectly secure, but we make every reasonable effort to protect the data you entrust to us. If we ever detect a breach that affects you, we will notify you promptly.
10. Children
WarpSend is intended for use by professionals, businesses, and adults. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, please contact us so we can remove it.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make a material change, we will notify you by email or in-app notice at least 14 days before the change takes effect. The "Last updated" date at the top of this policy reflects the most recent revision.
12. Contact
For privacy questions, requests, or concerns, contact us at privacy@warpsend.io.