🔒 Metransfer – Privacy Policy

1. Who We Are

Metransfer is operated by Depositado B.V., based in the Netherlands. For user accounts, Metransfer acts as the data controller. For uploaded files, Metransfer acts as a data processor on behalf of the uploader.

2. What We Collect

We collect only what is necessary to operate the Service:

• Account information: name, email address and ID from your chosen sign-in provider (e.g. Google or Microsoft).
• Technical metadata: IP address, browser type, upload/download timestamps and error logs.
• Uploaded files: encrypted and stored only for the chosen retention period.
• Cookies: we use only essential cookies required for authentication and security. Optional analytics cookies (if enabled) are anonymised and never used for advertising.

3. How We Use Data

Your data is used to:

• Authenticate and operate your Metransfer account.
• Enable file uploads, downloads and sharing.
• Prevent abuse and maintain security.
• Comply with legal requirements.

4. File Retention & Deletion

• Files are stored for the retention period and download limit set in your plan.
• After expiry, files are automatically deleted and cannot be recovered.
• Backups are permanently purged within 30 days.

5. Data Location & Security

All data is hosted within the European Economic Area (EEA). We use encryption (TLS in transit, AES-256 at rest) and maintain strict access controls. Access to files and account data is logged and limited to authorised personnel.

6. Third-Party Providers

We rely on secure, GDPR-compliant providers for:

• Hosting & storage (EU data centres).
• Authentication services (Google, Microsoft).

Each provider operates under a data-processing agreement consistent with EU law. For Business accounts, Metransfer offers a separate Data Processing Agreement (DPA) upon request.

7. Your Rights

You have the right to:

• Access, rectify or delete your personal data.
• Request a copy of stored data.
• Withdraw consent by deleting your account.

Requests can be sent to: support@metransfer.nl

8. Cookies & Tracking

Metransfer uses strictly necessary cookies to operate login sessions and maintain security. If analytical cookies are used, they are anonymous and do not track individual users. We do not use marketing or third-party tracking cookies.

9. Children's Privacy

Metransfer is not intended for use by individuals under the age of 16. If you believe a minor has created an account, please contact support@metransfer.nl for removal.

10. Abuse or Illegal Content

To report illegal uploads or policy violations, contact support@metransfer.nl. We investigate and remove unlawful content promptly.

11. Service Updates & Changes

We may update this Privacy Policy or the Service itself from time to time to improve security or comply with regulations. Significant changes will be communicated via email or in-app notification. The latest version is always available at metransfer.nl/privacy-policy.

12. Contact