Privacy Policy (GDPR)

1. Data Controller

The data controller is the operator of the Vault (RFile) platform. We are committed to protecting your privacy and personal data in strict compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

2. Processed Personal Data

We process the following categories of data in connection with our services:

• Registered Users: Email address, hashed password (using Argon2id/Bcrypt), storage quota metrics, and metadata of uploaded files.
• Guest Transfers (Úschovna mode): Optional sender and recipient email addresses, IP address (solely for rate limiting and fraud prevention).
• Uploaded Blobs: Physical file contents are securely stored on dedicated storage volumes with SHA-256 CAS deduplication. We do not inspect or share your file contents.

3. Data Retention

• Guest Drops: Automatically and permanently purged after 7 days, upon reaching maximum download limits, or upon sender deletion.
• Registered Accounts: Stored for the lifetime of your account. Items moved to Trash are permanently destroyed after 30 days.

4. Your Rights

Under GDPR, you have the right to access, rectify, or erase your data, as well as the right to data portability. For inquiries, contact us at fandaa7@post.cz.