Privacy Policy

The operator of the WoneFile service (“WoneFile”, “we”, “us”) is the data controller for the personal data described in this policy — including accounts on our hosted service, purchases, and use of this website. You can reach us at [email protected] for any privacy question or request.

If you use a WoneFile workspace operated by your employer or another organization, that organization is the controller for the files and activity in that workspace, and its privacy notice applies there. Where we operate a hosted workspace for a customer, we act as the processor on that customer’s instructions.

• Account data: name, email address, password hash, workspace and role information when you register or are invited.
• Billing data: billing name, email, country, and transaction identifiers. Card details go directly to Stripe; we never see or store full card numbers.
• Service data: the files and content you store in a hosted workspace, and the metadata the platform needs to operate it (names, sizes, versions, sharing and permission settings).
• Activity and audit data: sign-ins and in-product actions (uploads, views, downloads, permission changes) recorded so workspace owners can govern their data.
• Support data: messages you send us and the diagnostics you choose to share.
• Technical data: IP address, browser and device information, and server logs used for security and troubleshooting.

WoneFile is designed to run on your own infrastructure with no telemetry, no trackers, and no analytics beacons. When you self-host, your files, activity, and user data stay on your systems and do not flow to us in ordinary operation. We only receive the information you explicitly send us — for example a license purchase, a support request, or an update check if you enable one.

For users in the EEA/UK, we rely on the GDPR legal bases noted below:

• Provide and operate the service — creating accounts, storing and sharing your files, metering quotas (performance of a contract).
• Process payments and prevent fraud — via Stripe (performance of a contract; legitimate interest).
• Secure the service — logs, abuse detection, access monitoring (legitimate interest).
• Communicate with you — service notices, billing, support replies (contract; legitimate interest).
• Improve the product — aggregated, de-identified usage understanding for the hosted service (legitimate interest).
• Comply with law — tax, accounting, and lawful requests (legal obligation).

We do not sell personal data, and we do not use your files for advertising or profiling.

We share personal data only with the service providers needed to run WoneFile:

• Cloudflare — content delivery, DNS, and DDoS protection for our website and hosted service (may process IP addresses and request data).
• Stripe — payment processing (receives billing and payment details; acts as an independent controller for payment data).
• Hosting infrastructure providers — the data-center and server providers that run our hosted service and website.

Each provider is bound by a data-processing agreement and may process data only on our instructions. We may also disclose data where required by law, to enforce our terms, or in connection with a merger or acquisition (with notice where required). We do not otherwise share personal data with third parties.

Our providers may process data in countries other than yours, including the United States. Where personal data from the EEA/UK is transferred internationally, we rely on an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses (and the UK addendum).

• Account and workspace data: kept while your account is active. After you delete your account or a hosted subscription ends, we make data available for export for at least 30 days, then delete it from production systems.
• Backups: deleted data may persist in encrypted backups for a limited rotation period (no more than 90 days) before being overwritten.
• Billing and tax records: kept for the period required by law (typically up to 7 years).
• Server and security logs: retained for a limited period (typically up to 12 months) for security and troubleshooting.
• Trash and version history inside the product follow the retention policy configured for your workspace.

We protect personal data with measures appropriate to the risk, including encryption in transit (TLS) and at rest for hosted storage, hashed credentials, role-based access controls and audit trails inside the product, least-privilege access to production systems, and security monitoring. No method of transmission or storage is 100% secure; if a breach affects your personal data, we will notify you and the authorities as required by law.

Under the GDPR and similar laws, you have the right to access, correct, export (portability), and erase your personal data, to restrict or object to processing, and to withdraw consent where processing is based on consent. WoneFile builds the two most important rights into the product itself:

• Export: you can export your data from within the product at any time.
• Erase: you can delete your files and your account from within the product; deletion follows the retention schedule above.

For anything else — or if you use a workspace run by an organization — contact that organization first, or email [email protected]. We respond within one month. You also have the right to complain to your local data-protection authority.

This marketing website does not use tracking or analytics cookies. The WoneFile application uses only the strictly necessary cookies (or equivalent storage) required to keep you signed in and operate the workspace.

WoneFile is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this policy from time to time. We will post the revised version here with a new “last updated” date and, for material changes, give reasonable advance notice. Continued use after the effective date constitutes acceptance.

Privacy questions, requests, or complaints: [email protected]. See also our Terms of Service.