Privacy Policy
Last updated: July 2026
What we collect
When you upload a document, we collect your full name, phone number, an optional email address, the document title and description, and the file itself. When you pay, M-Pesa provides us a receipt number, payer name, and transaction timestamp.
How we use it
This information is used solely to process your payment, store your document securely, generate your retrieval code and QR image, and let you or anyone with your code retrieve the file later. We do not sell or share your data with advertisers.
Storage & security
Files are stored under randomized, non-guessable identifiers in a private storage location that is never directly browsable. Documents remain in storage until you choose to delete them, at which point they are permanently removed.
Payment data
Payments are processed through Safaricom's Daraja M-Pesa API. We store the transaction reference and status needed for reconciliation; we never see or store your M-Pesa PIN.
Your choices
You can permanently delete an uploaded document at any time from the retrieval page using your code. Once deleted, the file and its code cannot be recovered.
Contact
Questions about this policy can be sent through our Support page.