Privacy Policy for FileLite

Effective Date: January 1, 2025

FileLite values your privacy. This policy explains how we collect, use, and protect your information.

1. Information We Collect

Account Data: We only collect and store the absolute minimum data required to issue authentication tokens and manage your account. This includes your email address when you create an account or purchase a license. This data is used solely for account authentication and license verification - it is not used for any other purpose, including marketing or personalized tracking.

OTP Authentication: We use One-Time Password (OTP) authentication to secure your account. When you sign in, we send a temporary code to your email address. This code is valid for a short period and is used solely for authentication purposes. We do not store these codes after they expire, and they cannot be reused.

Analytics: Our website uses Umami Analytics, a privacy-first analytics service. Umami does not use cookies, does not collect personal data, and all analytics are completely anonymous. We use this solely to understand general website usage patterns (like page views and visitor counts). Umami respects Do Not Track settings. For more information, see Umami's documentation.

What We Don't Collect: We do not collect, store, or process any information about your image files, compression statistics, feature usage, or how you use the application. All image processing happens entirely on your device, and we have no access to your images or usage patterns.

Device Information: We collect minimal device identifiers only for license verification purposes. This information is not used for tracking, analytics, or any other purpose beyond ensuring your license is valid.

Fully Private: Your data is stored only to issue tokens and verify your license. We do not analyze, track, or use your data for any other purpose. Your privacy is our priority.

2. Use of Information

Account Data: Your email address is used exclusively for issuing authentication tokens, sending OTP codes, and verifying your license. We do not use your email for marketing, newsletters, or any promotional purposes. We do not analyze or track your account activity beyond what is necessary for authentication.

OTP Authentication: When you request to sign in, we send a one-time password to your email address. This temporary code is used solely for verifying your identity and authenticating your access. OTP codes expire after a short time and are automatically deleted from our system once used or expired.

No Usage Tracking: We do not collect or use any data about how you use FileLite. All compression, conversion, and image processing happens entirely on your device. We have no visibility into your usage patterns, file types, compression settings, or any other application activity.

Device Information: Device identifiers are used solely for license verification. This information is not used for tracking, analytics, or any other purpose.

Data Purpose: The only purpose of the data we store is to issue tokens that allow you to authenticate and access your license. Your data is not used for analytics, improvement, marketing, or any other purpose. It remains fully private.

3. Sharing of Data

We do not sell, trade, or share your email address or other personal data with third parties, except as necessary to provide services (e.g., payment processors for license purchases) or comply with legal obligations.

Payment Processors: When you purchase a license, your payment information is processed by Stripe. Stripe's privacy policy applies to payment data: https://stripe.com/privacy. We do not store or have access to your payment card details.

No Image Sharing: All image processing happens locally on your device, and your images never leave your computer. We have no access to your images and cannot share them with anyone.

4. Local Processing

FileLite processes all images locally on your device. Your images are never uploaded to our servers or shared with third parties. All compression, conversion, and processing operations occur entirely on your computer, ensuring complete privacy and security of your files.

5. Security

We take reasonable steps to protect your personal data, including email addresses, from unauthorized access, disclosure, or misuse. However, no method of transmission over the internet is 100% secure. Since all image processing happens locally on your device, your images are protected by your device's security measures.

6. User Rights (GDPR Compliance)

Right to Access: You may request to access your personal data at any time by contacting us.

Right to Rectification: You may request to modify or correct your personal data at any time.

Right to Erasure: You may request deletion of your account and personal data at any time by contacting us via the contact information provided at the end of this policy. We will process your request and delete your data within 30 days of receiving your request, except where we are required to retain it for legal or regulatory purposes. You will receive a confirmation once your data has been deleted.

Right to Data Portability: You may request a copy of your personal data in a structured, commonly used format.

Right to Object: Since we do not use your data for marketing or analytics, there is no processing to object to. Your data is only used for authentication token issuance.

Right to Lodge a Complaint: If you are located in the EEA, you have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.

Full Control: Since all image processing is local, you have full control over your image files. We have no access to them.

7. Data Retention

We retain your email address and account information for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal data within a reasonable timeframe, except where we are required to retain it for legal or regulatory purposes.

8. Updates to Privacy Policy

We may update this policy from time to time. You will be notified of any material changes via email or through the application.

9. Data Controller and Legal Basis

Data Controller: FileLite operates as an independent service. For questions about data processing, please contact us via the contact information provided below.

Legal Basis for Processing: We process your email address based on the legal basis of contract performance (to provide you with access to the service and verify your license) and legitimate interest (to prevent fraud and ensure service security).

No Marketing: We do not use your data for marketing purposes. You will not receive marketing emails unless you explicitly opt-in to such communications.

10. Governing Law

This Privacy Policy is governed by the laws of Lithuania. If you are located in the European Economic Area (EEA), your rights are protected under GDPR and other applicable data protection laws.

Contact Us

Questions about this privacy policy or your data? Contact us:

To request data deletion: Contact us using the information above with your request. Include your account email address, and we will process your deletion request within 30 days and confirm once completed.

We will respond to your inquiries within a reasonable timeframe, typically within 7 business days.