Legal
Privacy Policy
Transparent rules on how ShareXtra collects, protects, and handles your data with enterprise-grade security.
Introduction
At ShareXtra, operated by Forepine Technologies, we take your privacy and data protection with absolute seriousness. This Privacy Policy outlines the types of information we collect, how we process and protect it, and the explicit rights you hold when using our file sharing platform and related services.
Information We Collect
Personal Information
When you register on ShareXtra, we collect only essential identity data required for service operation:
- Full Name & Display Name
- Primary Email Address
- Encrypted Account Passwords (salted hash - never stored in plain text)
File Metadata & Storage
When uploading files, ShareXtra stores structural metadata necessary for managing links:
- Original file name & MIME extension type
- Exact file size in bytes
- Upload timestamp & expiration settings
- Encrypted AWS S3 object location key
Zero Knowledge Notice: ShareXtra system operators do not inspect, index, or analyze the actual binary content of your files. Files are directly streamed to private AWS S3 storage buckets.
How We Use Your Information
Core Operations
Authenticate user logins, manage uploads, and execute transfer links.
Billing & Subscriptions
Process payment invoicing via Razorpay without storing card numbers.
Security Monitoring
Detect brute-force attempts, unauthorized access, and automated abuse.
Notifications & Alerts
Send transactional emails, transfer receipts, and security updates.
Data Security & Storage Architecture
We enforce multi-tiered, enterprise security protocols across all storage nodes:
TLS 1.3 & AES-256 GCM Encryption
All network traffic is encrypted using TLS 1.3. Files at rest are encrypted with server-side AES-256 keys.
Strict AWS S3 Explicit Deny Policy
Direct public access to S3 object URLs is blocked at the bucket level. Access is granted exclusively through short-lived signed URLs generated dynamically by our backend API.
Ephemeral Access Control
Links expire automatically according to user configurations or max download limits.
Your Rights & Data Rights
Right to Access & Portability
Export a structured copy of your uploaded files and metadata at any time.
Right to Erasure ("To Be Forgotten")
Delete files or request complete account purge with a single click in settings.
Data Retention Timeline
- Account Data:
- Retained while your account remains active.
- Anonymous Transfers:
- Automatically deleted after 30 calendar days or upon custom expiry timestamp.
- Financial Logs:
- Retained up to 7 years as required under applicable tax laws.
International Data Transfers
Data is hosted primarily in secure AWS data centers with regional redundancy. Cross-border transfers adhere strictly to Standard Contractual Clauses (SCCs) and global data protection standards.
Policy Updates
Material changes to this policy will be announced via account email and dashboard notification at least 14 days before taking effect.
Contact Privacy Team
Forepine Technologies Private Limited
If you have any questions, concerns, or legal requests regarding your privacy, reach out to us directly: