Scope
This Privacy Policy covers personal information processed by FileWalls (“we”, “us”, “our”) when you visit our websites, create an account, use our products and services, or interact with us (collectively, the “Services”). This policy does not cover third-party sites or services that we do not control.
Information We Collect
- Account & Contact. Name, email, company, role, phone, billing contact.
- Billing. Address, tax IDs, partial payment instrument details handled by our payment processor.
- Service Usage. Log events, device & browser info, IP address, timestamps, configuration settings, and administrative actions.
- Content & Metadata. File names, sizes, paths, protocol operations (e.g., SFTP/WebDAV), and related metadata. File contents are stored encrypted at rest in your configured storage.
- Support. Troubleshooting details you provide, attachments, and ticket history.
- Marketing. Preferences and engagement (if subscribed).
How We Collect It
- Directly from you when you sign up, configure settings, or contact support.
- Automatically via cookies, logs, and analytics when you use the Services.
- From partners such as identity providers or payment processors as part of setup.
How We Use Information
- Provide, maintain, secure, and improve the Services.
- Authenticate users and enforce policies and entitlements.
- Process billing and manage subscriptions.
- Detect, prevent, and investigate security incidents and abuse.
- Comply with legal obligations and enforce agreements.
- Communicate about updates, security, and support (marketing only with your consent or as permitted).
Legal Bases (EEA/UK)
Where GDPR/UK GDPR applies, we rely on: contract necessity, legitimate interests, consent (where required), and legal obligation.
International Transfers & Residency
We offer regional data choices where available. When personal information is transferred across borders, we use appropriate safeguards (e.g., Standard Contractual Clauses) and require comparable protection from providers.
Security
We apply defense-in-depth controls: TLS in transit, encryption at rest, access controls, logging, and regular backups. No method is 100% secure, but we continually improve our safeguards.
Data Retention
We retain personal information while your account is active and as needed to provide the Services, meet legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and configuration.
Your Rights
Depending on your location, you may have rights to access, correct, delete, port, or restrict processing, and to object in certain cases.
- GDPR/UK GDPR: Access, rectification, erasure, restriction, portability, objection.
- CPRA/CCPA: Know, delete, correct, opt-out of “selling/sharing” (we don’t sell personal data), and limit use of sensitive data where applicable.
Sub-processors
We engage third parties to process personal information on our behalf (e.g., cloud hosting, storage, email delivery, analytics, support, payments). All sub-processors must meet appropriate data protection commitments.
A current list of material sub-processors can be provided upon request.
Children’s Privacy
The Services are not directed to children, and we don’t knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can take appropriate action.
Changes to this Policy
We may update this Privacy Policy for operational, legal, or regulatory reasons. We’ll post updates with a new “Last updated” date and notify you of material changes where required.
Contact Us / DPA
If you have questions, want to exercise your rights, or need a Data Processing Addendum (DPA), contact us:
- Email: privacy@filewalls.com
- Postal: FileWalls Privacy, 123 Example St, Suite 100, Your City, Your Country
This page is for transparency and is not legal advice. Your use of the Services is governed by our Terms of Service and any applicable DPA.