Legal & Compliance

We are committed to protecting your privacy and handling your data responsibly in accordance with global data protection laws.

• GDPR compliant - Full data subject rights including access, portability, and deletion
• CCPA compliant - California Consumer Privacy Act protections
• PIPEDA compliant - Canadian privacy requirements
• We never sell or share your data with third parties for marketing purposes

Our Terms of Service outline the rights and responsibilities of both FileFi and our users. Key highlights include:

• You retain full ownership of all files you upload
• Acceptable use policy prohibits illegal, harmful, or abusive content
• Clear service level commitments and support response times
• Transparent pricing with no hidden fees

For Enterprise customers, we provide comprehensive Data Processing Agreements (DPAs) that detail how we handle your data as a processor. Our DPAs include Standard Contractual Clauses (SCCs) for international data transfers and clearly define data processing activities, security measures, and breach notification procedures.

Your intellectual property remains yours. We claim no ownership rights over the content you upload. We only process your files to provide the FileFi Service. You grant us a limited licence to process your data solely to operate and improve the Service.

We are committed to protecting user privacy while complying with valid legal requests. We carefully review all government and law enforcement requests for user data and will only disclose information when legally required. We publish an annual transparency report detailing the number and nature of requests we receive.

We use cookies and similar technologies to provide essential functionality, analyze usage, and improve our service. We do not use tracking cookies for advertising purposes. You can manage cookie preferences through your browser settings.

We work with a limited number of trusted subprocessors to deliver our service, including cloud infrastructure providers and security scanning services. All subprocessors are contractually bound to maintain the same high standards of data protection that we uphold. We maintain a current list of all subprocessors and notify customers of any changes.