Privacy

Resourcepool, SARL, 14 rue Bausset, 75015 Paris, France. For any question about your data: contact@resourcepool.io.

• Your transfers: the files, their title, message, name, type and size, their settings (expiry, download limit, password stored as a hash) and their number of downloads.
• Your account, if you create one or an administrator invites you: your email address, your name if given, your role, and the dates of creation and last sign-in.
• Your API keys: their name, settings and date of last use. The keys themselves are only stored as a hash.
• Usage statistics: for each transfer and download, the size sent and a pseudonymous identifier computed from your IP address with a secret key. Your IP address itself is not stored.
• Technical data: technical logs kept for a limited time to operate and secure the service.

• To store your files and deliver them to the people who have their link: this is the service you ask for.
• To manage your account and your API keys, and apply the limits of the service.
• To measure the use of the service (bandwidth, number of visitors), which is our legitimate interest.
• To secure the service and prevent abuse, which is our legitimate interest.

• Files are deleted within about an hour after they expire or reach their download limit. Anonymous transfers last a few days at most.
• Your account, keys and transfers are kept until you delete your account, or until they expire.
• Deleting your account from your account settings deletes it immediately, with your keys and your files.

• OVHCloud hosts the service and the files, in France.
• Google Firebase Authentication (Google Ireland Limited) handles sign-in: your email address, your name and your password (which we never see). Google may process this data outside the European Union, under the standard contractual clauses of the European Commission.

Your data is not sold or shared with anyone else.

No advertising, no third-party analytics, no tracking across websites, no profiling. Files are not read, analyzed or used for any purpose other than delivering them, except to act on a report of unlawful content.

Links are random and cannot be guessed. File passwords and API keys are stored as hashes. Access to the service is encrypted.

Under the GDPR, you can access, correct and delete your data, receive it in a portable format, and object to or restrict its processing. Write to contact@resourcepool.io. You can also lodge a complaint with the CNIL (cnil.fr).

Cookies and the storage used in your browser are described in the cookie policy.