Your files, handled with care
This page explains exactly how OneShare stores, protects, and deletes your files. No legal jargon — just a plain explanation of what happens.
On this page
Your files are not our product
OneShare will never access, analyze, or use uploaded files for any purpose other than delivery to the intended recipient. We will never train AI models on your files. We will never sell or share file contents with third parties. We make money when you buy volume packs — your files have no commercial value to us.
- No AI training on uploaded content
- No analysis of file contents
- No sharing with third parties
- Files are private: only sender and recipient(s) can access them
Encrypted in transit and at rest
All data transferred between you and OneShare is encrypted using TLS 1.3. Files stored on our servers are encrypted using AES-256. This means that even if someone were to gain unauthorized access to our storage, the files would be unreadable without the encryption keys.
- TLS 1.3 for all data in transit
- AES-256 encryption at rest
- Signed URLs for file access (links expire automatically)
- Password-protected deliveries add an additional layer
Automatic deletion after 14 days
Files are stored on our servers for 14 days from the date of upload, then permanently and automatically deleted. There is no archive, no backup, and no way to recover a file after the retention period ends. This is intentional — we don't want to hold your data longer than necessary.
- 14-day retention period
- Automatic, permanent deletion
- No archive or backup after deletion
- You can also delete a transfer manually at any time
What we collect about you
When you create an account, we collect your email address. We collect usage metrics (volume used, transfers sent, login dates) to run the service. We do not collect or store payment information — payments are processed by Stripe, which handles all card data in compliance with PCI-DSS.
- Email address (for account access)
- Usage data (volume, transfer count)
- No payment data stored by OneShare
- No behavioral tracking or ad targeting
Your rights under GDPR
If you're based in the EU, you have the following rights regarding your personal data:
- Right to access: request a copy of the data we hold about you
- Right to deletion: request that your account and all associated data be deleted
- Right to portability: request your data in a machine-readable format
- Right to object: opt out of any non-essential data processing
- To exercise any of these rights, email [email protected]
Questions about our security practices? Contact us