Privacy

1. Data Controller

The responsible entity for data processing is:

Email: contact@sodatech.com

2. Data We Process

We process the following categories of data:

• Files uploaded by users
• Metadata such as filename, size, and timestamps
• Share-related information such as download count and expiry
• Access logs, including IP address and request metadata

3. Purpose of Processing

We process data for the following purposes:

• Providing secure file sharing services
• Enabling access to shared content
• Ensuring system security and abuse prevention
• Operating and maintaining the service

4. Legal Basis (GDPR)

Processing is based on:

• Art. 6(1)(b) GDPR, performance of a contract
• Art. 6(1)(f) GDPR, legitimate interest in secure and reliable operation

5. Storage and Retention

• Files are stored in S3-compatible object storage.
• Retention depends on the user-defined expiry.
• Deleted files may be retained temporarily for technical reasons, such as backup and cleanup processes.
• Logs are retained for a limited period for security and operational purposes.

6. Data Processors

We use third-party service providers for hosting and infrastructure, including Hetzner Online GmbH for cloud infrastructure and object storage.

Data is processed within Switzerland and/or the European Economic Area.

7. Security Measures

We implement appropriate technical and organizational measures, including:

• Encrypted transmission via HTTPS
• Optional end-to-end encryption performed on the client side

Important: if end-to-end encryption is enabled, only users with the decryption key can access the content. We do not have access to encrypted content.

8. User Rights

Users have the following rights under applicable law:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

Requests can be sent to: contact@sodatech.com

9. Complaints

Users have the right to lodge a complaint with a supervisory authority.

10. Cookies and Tracking

We do not use tracking cookies or third-party analytics services.

11. Abuse and Legal Requests

Reports of abuse or unlawful content may be submitted to: contact@sodatech.com