Privacy Policy

1. Overview & Scope

SendArro (“we”, “us”, or “our”) provides a browser-based, lightweight utility designed for immediate peer-to-peer file handoffs. This Privacy Policy describes how we handle information collected or processed when you visit our website, upload or download files, or contact us.

Our guiding privacy principle is data minimization: we collect only the technical details strictly required to transport files between sender and receiver and to protect the security of our platform.

2. Information We Collect

A. Information You Provide Directly

• Contact Form Inquiries: If you submit an inquiry through our Contact Us page, we collect your full name, email address, message subject, and inquiry details to review and reply to your communication.
• No User Account Information: SendArro does not feature user registrations, logins, passwords, or personal user profiles. You do not provide identity credentials to transfer files.

B. File-Transfer Data & Metadata

• Temporary File Payloads: Files uploaded by the sender are stored in temporary server storage exclusively to enable the intended recipient to retrieve them.
• Transfer Metadata: We process technical file metadata, including original file names, file sizes, MIME types, upload timestamps, and a randomly generated six-digit numeric transfer code.

C. Technical & Operational Connection Logs

When you interact with SendArro, our web servers automatically generate standard access logs for operational reliability and security defense. These logs may include:

• Internet Protocol (IP) addresses of both the uploading sender and downloading recipient.
• Browser user-agent strings, device operating system types, and language settings.
• Request timestamps, HTTP status codes, byte volumes transferred, and endpoint URLs.
• Transfer progress status (e.g., started, downloading, completed, or expired).

3. How We Use Your Information

We process collected information strictly for the following operational purposes:

• Transfer Execution: Connecting uploaded files with recipients who submit the matching six-digit code.
• Customer Support: Addressing inquiries, bug reports, and feedback submitted via the contact form.
• Security & Abuse Prevention: Detecting automated brute-force attempts on transfer codes, mitigating Denial-of-Service (DoS) attacks, blocking malicious scrapers, and enforcing file size and transfer limits.
• Performance & Diagnostics: Maintaining server health, optimizing network bandwidth, and diagnosing technical faults.

4. File Handling, Storage & Automatic Deletion

SendArro is built around an automatic purging lifecycle to protect file confidentiality:

• 10-Minute Expiration: All uploaded files have an enforced maximum lifespan of 10 minutes from the moment upload completes. If the code is not redeemed within 10 minutes, the file is automatically and permanently purged.
• Single-Download Lifecycle: A transfer code is valid for exactly one successful download. Once the recipient completes downloading the file or multi-file ZIP archive, the file is immediately removed from disk storage.
• Irreversible Deletion: Deletion removes the file payload from storage. SendArro maintains no cold archives, historical caches, or file recovery mechanisms.

5. Cookies, Analytics & Advertising

To support website operations, we utilize cookies and similar technologies:

• Essential Session Cookies: Required for site navigation, security token validation, and core web server operation.
• Analytics (Google Analytics): We utilize aggregated analytics (such as Google Analytics with anonymized telemetry) to measure site traffic trends, popular device formats, and page view counts.
• Third-Party Advertising: SendArro may display third-party advertisements (such as Google AdSense). These third parties may set cookies or web beacons to display ads based on your visits to this and other websites.

For detailed information on how cookies are deployed and how you can disable them, please consult our dedicated Cookie Policy.

6. Third-Party Service Providers & Data Sharing

We do not sell, rent, lease, or monetize your personal information or file transfers. We share data only with necessary operational vendors:

• Hosting & Infrastructure Providers: Cloud servers, disk storage providers, and network hosts that supply the computing hardware on which SendArro runs.
• Email Delivery Services: Secure SMTP mail infrastructure used to forward contact form inquiries to our site administrators.
• Legal & Law Enforcement Compliance: We may disclose connection records if required to do so by applicable law, court order, or subpoena, or when necessary to investigate violations of our Acceptable Use Policy or defend against malicious attacks.

7. Data Security Measures

We apply robust technical safeguards to maintain service integrity:

• Encryption in Transit: All web communication, file uploads, and file downloads are encrypted using standard HTTPS/TLS (Transport Layer Security) encryption.
• Ephemeral Storage Architecture: Storing files for mere minutes drastically reduces the window of exposure.
• Access Restrictions: Upload directories are secured and direct directory browsing is disabled.

8. Data Retention Periods

• Transfer Files: Maximum of 10 minutes, or immediate deletion upon download.
• Contact Inquiries: Retained in our administrative email mailbox only for the duration necessary to resolve your request.
• Web Server Logs: Rotated and retained for standard operational security audit windows (typically 30 to 90 days), after which they are deleted.

9. Your Privacy Rights

Depending on your location (including the European Economic Area under GDPR, the United Kingdom, or California under CCPA/CPRA), you may hold statutory rights regarding your personal data. These include rights to request access, rectification, or erasure of personal information submitted via our contact form. Because file transfers do not require identity accounts, we cannot associate temporary transfer codes with specific individual identities.

To exercise your data privacy rights, please reach out through our Contact Us page.

10. Children’s Privacy

SendArro is an everyday file transfer utility intended for general audiences. Our platform is not directed toward or designed for children under the age of 13 (or under 16 where applicable under regional law). We do not knowingly solicit or collect personal information from children.

11. Policy Updates & Contact

We may update this Privacy Policy periodically to reflect technological adjustments, legal requirements, or operational updates. Any revisions will be published on this page with an updated effective date.

If you have any questions, suggestions, or concerns regarding our privacy practices, please contact us via the Contact Us form.