Privacy Policy

This policy describes what we collect, why we collect it, and what we do with it. We keep data collection to the minimum required to run the Service.

Data we store

• Account data. Email, display name, organisation membership, and authentication metadata.
• Show files. The files you upload, their versions, and metadata you attach (notes, comments, share links).
• Activity logs. Uploads, restores, moves, and share events — used to power the activity feed and to investigate abuse.
• Billing data. Subscription tier and payment status, handled by Stripe. We do not store card numbers.

Where data lives

Files are stored on AWS S3 with signed URL access. Databases are hosted on Supabase. Storage region is EU by default; US region available on Team. We are GDPR- and UK GDPR-compliant.

What we do not do

• We do not sell or rent your data.
• We do not train machine-learning models on your files.
• We do not share your content with third parties beyond the sub-processors required to run the Service (AWS, Supabase, Stripe, Resend for transactional email).

Your rights

You can export, edit, or delete your data at any time. Contact us to exercise your GDPR rights (access, rectification, deletion, portability, objection).

Retention

Active account data is retained for the life of the account. On cancellation, a 14-day grace period applies before permanent deletion. Billing records are retained for the period required by law.

Contact

Privacy questions or data requests: privacy@showfile.central.