Privacy Notice

Who we are

FileForge is operated by Swapnil Sagar Gadgil ("we", "us"). We are the data controller for the personal data described in this notice, meaning we decide why and how it is processed. You can reach us using the support contact listed on this site.

Your files

Every file you process with FileForge — image, video, audio, or PDF — is handled entirely inside your browser using the Canvas API, WebAssembly and Web Workers. Files are never uploaded to our servers, never stored by us, and never seen by us or any third party.

What we collect, why, and on what legal basis

• Account data (email address, authentication identifiers, sign-in timestamps) — to create and secure your account and provide the service. Legal basis: performance of a contract.
• Usage data (tool used, file type, operation, file size before and after, timestamp — never the file itself or its filename) — to enforce free-plan limits fairly and show your processing history. Legal basis: performance of a contract and our legitimate interest in preventing abuse.
• Subscription data (customer and subscription identifiers, plan, subscription status, renewal dates) received from our payment provider — to grant Pro access and support billing questions. Legal basis: performance of a contract.
• Technical and security data (IP address, browser/device information, error logs) — to keep the service available and secure. Legal basis: legitimate interests.

We do not collect payment card details. Card data is entered into and processed by Paddle, never by us.

Payments and Merchant of Record

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. When you purchase FileForge Pro, your name, email, billing address, country, tax information and payment details are collected and processed by Paddle as an independent controller for the sale, subscription management, payment processing, invoicing, tax compliance and fraud prevention. Paddle shares limited data back with us (customer/subscription IDs, status, plan, email) so we can activate your plan. See Paddle's privacy notice.

Who we share with

• Hosting, database and authentication providers (our cloud infrastructure provider) — as processors acting on our instructions.
• Paddle — as Merchant of Record for the sale of subscriptions.
• Professional advisers (legal, accounting) where necessary.
• Authorities where we are required to disclose by law.

We never sell your personal data.

International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where that happens, transfers are covered by appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

How long we keep it

• Account data: for as long as your account exists, then deleted within 30 days of account deletion.
• Usage/processing history: 12 months, then deleted or anonymised.
• Subscription records: retained for up to 7 years where required by tax and accounting law.
• Security and error logs: up to 90 days.
• Your files: not retained at all — they never leave your device.

Your rights

Depending on where you live, you have the right to access your data, correct it, have it deleted, receive an export in a portable format, restrict or object to certain processing, and withdraw consent where processing is based on consent. You can delete your account or request an export by contacting us; we respond within one month. If you are in the UK/EEA you also have the right to complain to your local data protection supervisory authority.

Security

We apply appropriate technical and organisational measures: encryption in transit (HTTPS/TLS), encryption at rest for our database, row-level security so each account can only read its own records, restricted administrative access, and least-privilege credentials. Because file processing happens locally, the most sensitive data — your files — is never exposed to us at all.

Cookies

We use only essential cookies and browser storage needed to keep you signed in and remember your theme preference. We do not use advertising or cross-site tracking cookies. Paddle may set cookies necessary to complete checkout. You can clear or block cookies in your browser, though sign-in will not work without the essential ones.

Future server-touching features

If we ever introduce a feature that requires sending your file to a server (for example, a document-format conversion with no in-browser equivalent), we will state that plainly on the tool itself and delete the file within 60 minutes of processing.