Privacy Policy

Last updated: March 23, 2026

Seyarabata ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our file-sharing service at seyarabata.com (the "Service").

1. Information We Collect

1.1 Account Information

When you register, we collect your email address and a password (stored as a secure hash). If you sign in via Google OAuth, we receive your email and basic profile information from Google.

1.2 Upload Data

We store the files you upload and associated metadata (file name, size, content type, upload date, expiration date).

1.3 Usage Data

We automatically collect:

• IP addresses (for rate limiting, fraud prevention, complaint handling, and regulatory compliance)
• Download counts and bandwidth usage
• Browser user agent (for compatibility)
• Timestamps of actions (uploads, downloads, logins)

1.4 Payment Data

Payment processing is handled by Stripe. We store your Stripe customer ID and subscription status but never store your full credit card number.

2. How We Use Your Information

We use your information to:

• Provide and operate the Service
• Process payments and manage subscriptions
• Enforce rate limits and prevent abuse
• Respond to copyright complaints and legal requests
• Send transactional emails (password resets, account notifications)
• Improve the Service

We do not sell your personal information. We do not use your data for advertising or profiling.

3. Data Storage and Security

3.1 Storage

Your files are stored on S3-compatible object storage in the EU and/or the US. Account data is stored in a MySQL database.

3.2 Security Measures

We implement reasonable security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Secure password hashing (bcrypt)
• Rate limiting on authentication and upload endpoints
• CSRF protection on all forms
• Security headers (HSTS, CSP, X-Frame-Options)
• Virus scanning of uploaded files

3.3 Data Retention

Anonymous uploads are automatically deleted after 24 hours. Registered user files are retained until deleted by the user or upon account termination. Account data is retained for the duration of your account and a reasonable period thereafter.

4. Sharing Your Information

We may share your information with:

• Service providers: Stripe (payments), Resend (transactional email), S3 storage provider
• Law enforcement: When required by law or to respond to valid legal process
• Copyright holders: IP addresses and upload metadata in response to valid copyright complaints

We do not share your information with advertisers or data brokers.

5. Cookies

Seyarabata uses only essential cookies required for the Service to function:

• Session cookie: Maintains your login session
• Remember me cookie: Optional, keeps you signed in for 30 days
• CSRF token: Protects against cross-site request forgery

We do not use analytics, tracking, or advertising cookies.

6. Your Rights

Under applicable data protection laws (including GDPR), you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing of your data
• Withdraw consent: Where processing is based on consent

To exercise these rights, contact us at support@seyarabata.com. We will respond within 30 days.

7. International Transfers

Your data is stored and processed in the European Union and the United States. We use appropriate safeguards for cross-border data transfers in compliance with applicable data protection laws.

8. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children. If we become aware of such collection, we will promptly delete the data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or notice on the Service. Continued use after changes constitutes acceptance.

10. Contact

For privacy-related questions or to exercise your data rights, contact us at support@seyarabata.com.