개인정보 처리방침

Who we are

SendThis is operated by Curious Objects, of Sharjah Media City, Sharjah, United Arab Emirates (“SendThis”, “we”, “us”). This policy covers the websites at sendthis.com and sendthis.to, public profile and portfolio pages, the SendThis panel for Adobe Premiere Pro, and the related apps and services (the “Service”).

Under the EU and UK General Data Protection Regulation (GDPR), we are the controller of the personal information this policy describes. For the files you upload, we act on your instructions as a processor, as described under “Your files”. For California residents, terms used here have the meanings given in the CCPA and CPRA. For users in India, this policy is published under the Digital Personal Data Protection Act, 2023 (DPDP Act).

Information you give us

• Account details: your email address, and the name, profile photo and language you choose. You sign in with a one-time code sent to your email address, or with Google.
• Transfer details: file names, sizes and types, the title and message you add, the email addresses and usernames you send to, the expiry you choose, and a password if you set one on a transfer.
• Your files: the files you upload, handled as described under “Your files”.
• Usernames and public pages: the usernames you claim, and anything you add to a profile or portfolio page, such as a name, bio, note, pictures, links and media. You decide whether each page is published and whether search engines may list it.
• Your inbox: the senders you approve, mute or block, and your inbox and notification settings.
• Billing: for paid plans, your plan, subscription status and billing history. Card details are collected and stored by our payment processor, Stripe, not by us.
• Messages to us: what you send to support, and any report you submit about a transfer or page, including your name, email address, country and the reason for the report.

Information collected automatically

• Usage and device information: the pages you view, the features you use, errors, and your IP address, browser, operating system, device type and language.
• Views and downloads: when someone opens or downloads a transfer, we count it so the sender can see how often it has been viewed and downloaded.
• Cookies and browser storage: as described under “Cookies, storage and analytics”.

Information from others

• Google: if you sign in with Google, we receive your email address, name and a Google account identifier.
• Stripe: confirmation of payments and your subscription status.
• Other people: the email address or username someone enters to send you files, and any report someone submits about content you shared.

The Adobe Premiere Pro panel

The SendThis panel for Adobe Premiere Pro is optional. It uses the same account and transfer information this policy describes.

To sign in, the panel shows a short code and opens sendthis.com, where you approve it while signed in to your account. We then keep a record of the connection: a device name (for example, “Adobe Premiere Pro”), the account it is linked to, and when it was connected and last used. The sign-in token the panel receives is stored on your computer.

The panel reads the names, file locations (paths) and sizes of the media you choose to send, so that it can upload those files. It does not read the rest of your project. The files you send are uploaded and stored like any other transfer.

You can disconnect the panel at any time under Connected apps in your account settings. Its sign-in ends straight away, and it has to be approved again before it can be used.

How we use information

We use personal information for the following purposes, on the following legal bases under the GDPR:

• To provide the Service: creating and delivering transfers, sending the notifications you ask for, and running public pages. Basis: performing our contract with you.
• To run your account: creating it, signing you in and keeping it secure. Basis: performing our contract with you.
• To take payments: billing, preventing fraud and meeting tax obligations. Basis: our contract with you, and legal obligations.
• To keep the Service safe: security, preventing abuse, handling reports and fixing problems. Basis: our legitimate interest in running a secure, reliable service.
• To improve the Service: understanding how it is used. Basis: our legitimate interest in improving the Service.
• To send service emails: about your account, transfers, security, billing and changes to these policies. Basis: our contract with you, and our legitimate interests.
• To meet legal obligations: responding to lawful requests, enforcing our Terms and defending claims. Basis: legal obligations, and our legitimate interests.

For users in India, we rely on your consent under the DPDP Act, and on the legitimate uses the Act permits where they apply.

SendThis shows no ads. We do not use your files to build advertising profiles or to train machine-learning models.

Your files

Files you upload are stored on S3-compatible object storage run by our infrastructure provider. We handle them on your instructions: to store them, deliver them to the people you choose, create previews, and delete them.

Files are sent over encrypted (HTTPS) connections. Only a small number of our staff can access them, and only for operational, security or legal reasons. We do not sell your files or the information in them.

You are responsible for any personal information inside the files you share, and you need a lawful basis to upload and share it.

Who we share information with

We do not sell personal information. We share it only in these ways:

• Service providers: companies that work for us, providing hosting and storage, email delivery, payments (Stripe), analytics (Google Analytics and Microsoft Clarity) and support tools. They may use personal information only to provide their services to us.
• The people you send to: anyone with a transfer’s link can open it until it expires. People you send to by email or username are notified by email or in their SendThis inbox.
• The public: a profile or portfolio page you publish can be seen by anyone, and listed by search engines if you allow it.
• Legal and safety: when the law requires it, to enforce our Terms, or to protect people, the Service or us from fraud, abuse or harm.
• Business changes: as part of a merger, acquisition or sale of assets, with the same protections as this policy.
• With your consent: for anything else we tell you about at the time.

International transfers

Your personal information may be processed in countries other than the one you live in. Where the law restricts transfers out of a region, such as the EEA or the UK, we rely on recognised safeguards such as the European Commission’s Standard Contractual Clauses. You can ask us for a copy.

How long we keep information

We keep personal information only for as long as we need it for the purposes in this policy, or as the law requires.

• Files: a transfer’s link stops working when it expires or when you delete it. After a transfer expires, its files may be kept for a limited time so that they can be recovered on a paid plan, and are then deleted. Copies can remain in backups for a limited time before they are overwritten.
• Transfer records: the name, size, recipients and dates of a transfer can stay in your history after its files are gone.
• Account information: for as long as you have an account. You can ask us to delete your account at any time.
• Billing records: for as long as tax and accounting law requires.
• Logs: for a limited time, or longer when needed for a security investigation.

Cookies, storage and analytics

We use cookies the Service needs in order to work: to keep you signed in and to remember your language.

Your browser also stores your theme and view settings, a copy of your account details and recent transfers so the app opens faster, and a note of an unfinished upload so you can resume it. The copy of your account details and transfers is removed when you sign out.

We use Google Analytics and Microsoft Clarity to understand how the Service is used and to fix problems. They set their own cookies. Clarity records how pages are used, including clicks, scrolling and what appears on screen. We tell these tools an account identifier and your plan, never your email address or your name. You can block their cookies in your browser settings, and the Service still works without them.

Security

We use technical and organisational safeguards to protect personal information, including encrypted connections, access controls and sign-in cookies that scripts on the page cannot read. No system is completely secure. Keep your share links private, and set a password on transfers that need one.

If we become aware of a personal data breach that is likely to put your rights and freedoms at risk, we will notify the relevant authority and the people affected, as the law requires.

Your rights

Children

SendThis is not meant for children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

Other websites

Websites and services we link to or embed have their own privacy policies. A video from YouTube, Vimeo or Loom on a portfolio page loads its player only when you press play. When you add a link to a portfolio, we visit that page to fetch its title and pictures.

Changes to this policy

We may update this policy. If we make a significant change, we will tell you by email or in the Service before it takes effect, and update the effective date at the top of this page.