Privacy notice without unsupported claims.
These pages describe the intended product policy surface while formal legal, security, vendor, and Enterprise reviews are still gated by the operational readiness register.
- Reviewed by
- GetFileURL technical team
- Last updated
What this page answers
Current GetFileURL privacy placeholder for account, workspace, file metadata, diagnostics, analytics, and support data while legal review remains pending.
Use this page when the workflow needs file bytes available at a direct URL with predictable metadata, lifecycle controls, and a cleanup path.
Updated
The product separates file bytes from control-plane metadata.
File bytes are stored in Cloudflare R2, while workspace records, API keys, audit events, usage state, diagnostics, and notification state live in Convex.
Account and workspace data
Clerk identity, workspace membership, plan key, region fields, preferences, and audit records support access control.
File metadata
The control plane stores file IDs, size, type, retention, scan state, delivery state, and lifecycle timestamps, not public analytics truth.
Diagnostic history
URL diagnostics store hostnames and URL hashes instead of raw submitted URLs.
Access, deletion, and data requests are designed into the dashboard.
Users can delete file URLs, configure retention, submit data requests, and review notification/audit surfaces. Formal privacy rights wording still requires legal review.
Deletion
Deleting a file URL records a tombstone and queues purge so delivery remains blocked.
Retention
Workspace retention settings bound how long uploaded files remain available.
Requests
The data-request workflow tracks access, correction, export, deletion, restriction, and objection requests.
Answers before the workflow breaks
Is this the final privacy policy?
No. This is a product placeholder until external legal review approves final wording.
Do you sell customer file data?
No product architecture decision depends on selling customer file data, and analytics events are sanitized.
Where do privacy requests go?
Use the dashboard data request section or contact support with the workspace context.