Privacy Policy

Effective date: March 26, 2026

Sendbl ("we", "us", "our") operates the Sendbl file exchange API and website. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Files. When users upload files through Sendbl, those files are stored temporarily in encrypted cloud storage (AWS S3). Files are automatically deleted when the associated upload link expires.

Metadata. We store file metadata (filename, file size, upload timestamp) and upload link metadata (creation time, expiry, status) in our database. This data is deleted when the upload link expires.

API Keys. When you register for an API key, we store a one-way hash of the key. We do not store the raw API key after it is shown to you once.

Logs. Our servers automatically log request metadata (IP address, request path, timestamp, HTTP status) for operational and security purposes. Logs are retained for 30 days.

2. How We Use Information

We use collected information solely to:

We do not sell, rent, or share your data with third parties for marketing purposes.

3. Data Storage and Security

All files are stored in AWS S3 with server-side encryption. Data is transmitted over HTTPS with TLS encryption. Access to files requires time-limited presigned URLs or valid JWT tokens. Upload links and files automatically expire and are permanently deleted based on the configured expiry (default: 72 hours).

4. Data Retention

Files and upload links are retained only until their expiry time, after which they are automatically and permanently deleted. Server logs are retained for 30 days. API key hashes are retained until the key expires.

5. Third-Party Services

We use the following third-party services to operate Sendbl:

These services have their own privacy policies governing data they process on our behalf.

6. Your Rights

You can delete your files and upload links at any time through the API. If you need assistance with data deletion or have questions about your data, contact me via Telegram.

7. Children's Privacy

Sendbl is not directed at children under 13. We do not knowingly collect information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

9. Contact

If you have questions about this Privacy Policy, contact me via Telegram.