GoFile Technologies SAS ("GoFile", "we", "us") is the data controller for personal data collected through this Service. We are registered in France and process data in accordance with the General Data Protection Regulation (GDPR) and applicable French data protection law.
Our Data Protection Officer can be reached at dpo@gofile.my.
| Category | Data points | Legal basis |
|---|---|---|
| Account data | Email address, username, hashed password, account creation date | Contract |
| Upload metadata | Filename, file size, MIME type, upload timestamp, expiry date | Contract |
| Usage data | IP address, browser user-agent, pages visited, timestamps | Legitimate interest |
| Payment data | Billing name, last 4 digits of card, transaction IDs (processed by Stripe) | Contract |
| Communications | Support emails and chat messages | Legitimate interest |
We do not read, scan, or analyze the content of files you upload except as required to detect illegal material (CSAM) as mandated by law.
We do not use your data for advertising, do not sell it to third parties, and do not build behavioral profiles.
We share data only with:
We do not transfer personal data to countries outside the EU/EEA without appropriate safeguards (Standard Contractual Clauses or adequacy decisions).
We retain personal data only as long as necessary for the purposes described:
GoFile uses a minimal set of cookies:
We do not use third-party advertising cookies or tracking pixels.
If you are in the EU/EEA, you have the following rights:
To exercise any right, contact privacy@gofile.my. We will respond within 30 days. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés).
We protect your data with: TLS encryption in transit; AES-256 encryption for stored files; bcrypt hashing for passwords; server-side access controls; and regular penetration testing by independent security researchers. Despite these measures, no system is completely secure. We will notify you and the relevant authorities in the event of a data breach that affects your rights.
GoFile is not directed at children under 13 (or the applicable age of digital consent in your country). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact privacy@gofile.my and we will delete it promptly.
For privacy questions or to exercise your rights: