Privacy Policy
- We collect what we need to run your account, bill you and keep the service secure.
- We do not sell your data, and we do not use analytics or advertising trackers.
- We do not look at or use the contents of your files for our own purposes.
- You can exercise your rights under the Data Privacy Act by emailing privacy@storage4everyone.com.
1Who we are
Storage4Everyone is operated by Lealix IT Solutions, the personal information controller for the data described here. We follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. Our Data Protection Officer can be reached at privacy@storage4everyone.com.
2What we collect
| Category | Examples |
|---|---|
| Account | Email address, name, password (stored only as a secure hash), organization, project, role and intended use. If you sign in with GitHub or Google: your account ID, name, profile picture and, for GitHub, your username. |
| Sign-in and security | Passkey public keys and device names, signed-in sessions and trusted devices (with IP address and browser details), IP addresses you sign in from (to alert you about new sign-ins), and a security log of account actions. |
| Files and usage | File names, sizes and types; bucket and workspace settings; download records (file name, IP address and time); request and transfer counts used for plan limits. For share links: the file, expiry, revocation, number of views and last view time. We do not record the IP addresses of people who open a share link. |
| Billing | Token balance and history, payment amount, payment method type and PayMongo payment references. We do not receive or store full card numbers or e-wallet credentials. |
| Support and messages | Emails you send us, including attachments, and in-app notifications we send you. |
| Waitlist and invitations | Email address, the page you joined from, campaign tags in the link you used, and which version of the consent text you accepted. Invitation codes are stored only in hashed form. |
| Account reviews | If our staff review your account under the Acceptable Use Policy: the reason for any suspension and internal review notes. |
3Your files
The files you upload belong to you. We store and deliver them on your instructions and do not use their contents for advertising, profiling or training. We detect a file's type when you upload it so it is served safely. Staff access file information only to help you when you ask, to review a reported violation, or when the law requires it.
If your files contain other people's personal data, you are responsible for having a lawful basis to store it, and to share it when you create a share link. A share link makes that file available to anyone who has the link until it expires or you revoke it. When the link is posted in an app that shows previews, that app receives the file name and size, and for images, the image itself.
4Why we use it
- To provide the service you signed up for (contract): creating your account, storing and delivering files, processing payments and providing support.
- To keep S4E secure (legitimate interest): preventing abuse, enforcing limits, alerting you to new sign-ins and investigating reports.
- To meet legal obligations: keeping billing records and responding to lawful requests.
- Waitlist emails (consent): telling you about early access. You can withdraw consent at any time by emailing support@storage4everyone.com.
We send service emails such as sign-in codes, security alerts and invitations. We do not send marketing emails. Some decisions are automatic, such as refusing uploads that exceed a speed limit; you can ask a person to review any decision that affects you.
6International transfers
Some providers above process data outside the Philippines. We choose providers that protect data with security measures comparable to those required by the Data Privacy Act, and we remain responsible for your data when they process it for us.
7How long we keep it
| Data | Kept for |
|---|---|
| Account information | While your account is open |
| GitHub account ID that unlocked the free 5 GB | While your account is open, even after you unlink GitHub, so the same GitHub account cannot unlock the free 5 GB twice |
| Share link records (file, expiry, view count) | Until you delete the bucket or your account. Expired and revoked links stop working immediately (cached copies within 5 minutes) |
| Signed-in sessions, trusted devices | Up to 30 days |
| Sign-in codes and reset links | Minutes to 24 hours, then they stop working |
| Invitation codes | Valid for 30 days |
| Deleted files | Free plan: removed immediately. Starter: restorable from trash for 7 days. Pro: 30 days. Deleting a whole bucket removes it immediately. |
| Security log, download records, billing records | Kept after an account is closed, for security investigations and for as long as tax and accounting laws require |
| Waitlist entries | Until you ask to be removed or early access ends |
| Support emails | As long as needed to resolve your request and keep a record of it |
8Your rights
Under the Data Privacy Act you have the right to:
- be informed about how your data is processed;
- access a copy of your personal data;
- correct inaccurate data;
- object to processing, or withdraw consent where processing is based on consent;
- have your data erased or blocked, subject to the records we must keep;
- receive your data in a commonly used electronic format (data portability);
- be compensated for damages caused by unlawful processing; and
- file a complaint with the National Privacy Commission.
Email privacy@storage4everyone.com from your account email. Account closure, data export and profile corrections are handled by our team on request; we will verify your identity and reply within the period required by law. You can already delete buckets, files, workspaces, passkeys and sessions yourself in the dashboard.
9Security and breaches
We protect data with measures such as hashed passwords and keys, encrypted connections, private buckets by default and multi-factor authentication for our staff. See our Security page for details. If a breach is likely to put you at risk, we will notify you and the National Privacy Commission as the law requires.
10Children
S4E is not directed at children. Users under 18 need the consent of a parent or guardian. If you believe a child has given us personal data without consent, contact privacy@storage4everyone.com.
11Changes to this policy
We will update this policy when our practices change and notify you by email or in the dashboard about significant changes. The date at the top shows the latest version.
12Contact and complaints
Data Protection Officer, Lealix IT Solutions: privacy@storage4everyone.com. If you are not satisfied with our answer, you can contact the National Privacy Commission at privacy.gov.ph.