Data Controller: FileLu, LLC, United States
If you have any questions or concerns, contact our Data Protection Officer (DPO) at [email protected].

---

Lawful Bases for Processing

We process personal data under the following lawful bases, as required by Article 6 of the GDPR:

• Contractual necessity to provide our services and maintain your account.
• Consent for optional features, analytics, cookies, and marketing.
• Legal obligation to comply with tax, billing, and regulatory requirements.
• Legitimate interest for fraud prevention, service improvement, and security.

---

Legal Basis for Data Processing

Your privacy is important to us. It is FileLu's policy to respect your privacy regarding any information we may collect from you across our website, https://filelu.com, https://file.lu, and other sites or subdomains we own and operate.

We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used.

We collect the minimum necessary amount of information. We don’t buy or sell lists of information. We don’t unnecessarily share your personal information.

We only retain collected information for as long as necessary to provide your requested service. What data we store, we protect within commercially acceptable means to prevent loss and theft, unauthorized access, disclosure, copying, use, or modification.

We require a prior user's consent before starting any data processing on FileLu.

We don’t share any personally identifying information publicly or with third parties, except when required by law.

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites and cannot accept responsibility or liability for their privacy policies.

You are free to refuse our request for personal information, with the understanding that we may be unable to provide some of your desired services.

Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. If you have any questions about how we handle user data and personal information, feel free to contact us.

---

How Is Information Collected?

When you give us permission to obtain it. When you sign up for or use our products, you voluntarily give us certain information. This can include your name, profile photo, tags, comments, likes, email address used to sign up, and any other information you provide us.

If you use FileLu on your mobile device, you can also choose to provide us with location data.

You may also give us permission to access your information in other services. For example, you may link your Apple, Google, Facebook, or Twitter account to FileLu, which allows us to obtain information from those accounts, such as your email. The information we obtain often depends on your settings or their privacy policies.

We collect technical information when you use our products. We collect such information automatically to help analyze behavior, improve performance, and maintain our platform securely.

• Log Data includes IP address, pages visited, browser type, date/time, and activity logs.
• Cookies are used for login, preferences, analytics, and persistent sessions. You may manage or withdraw cookie consent anytime via browser settings or our cookie banner.
• Device Information includes device type, operating system, and app crash data, depending on your device settings.

---

How Do We Use Information We Collect?

Personally Identifiable Information (PII) is used to provide services, maintain your account, enable uploads, and support your user experience. Information may appear in your user profile depending on your chosen privacy settings.

We may use your information for:

• Operating and improving our services.
• Processing payments.
• Detecting and preventing fraud or abuse.
• Communicating with you regarding your account or service updates.

We will not release your personal information without your consent, except as required by law or to enforce our Terms of Service.

---

Google Advertising Cookies

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to websites. Users may opt out of personalized advertising by visiting Ads Settings or www.aboutads.info.

Opting Out of Cookies and Tracking

You can control and manage cookies directly in your browser. You may also choose to opt out of personalized advertising and analytics as follows:

• Google Ads Personalization: You can opt out by visiting Google Ads Settings or AboutAds.info.
• Google Analytics: You can prevent Google Analytics from collecting data by installing the Google Analytics Opt-Out Browser Add-on.
• General Cookie Management: You can delete or block cookies in your browser settings. Disabling cookies may affect website functionality.

---

GDPR Compliance

FileLu takes your privacy seriously. We follow the General Data Protection Regulation (GDPR) for all users in the European Economic Area (EEA). We process the minimum data required to provide our services and we do not sell or rent personal information.

You can delete your account and all your data anytime from My Account.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access to know what data we hold about you.
• Right to Rectification to correct inaccurate or incomplete data.
• Right to Erasure to request deletion of your data.
• Right to Restrict Processing to limit how we use your data.
• Right to Data Portability to obtain and reuse your data in another service.
• Right to Object to processing based on legitimate interest or direct marketing.
• Right to Withdraw Consent to stop processing where consent was previously given.

To exercise any of these rights, please contact [email protected].

---

Data Transfer Safeguards

When transferring data outside the EEA, FileLu uses approved mechanisms such as Standard Contractual Clauses (SCCs) to ensure adequate protection. Our primary data centers are located in the United States, Germany, Finland, and Singapore.

Our Policy Concerning Children

FileLu’s websites and services are not intended for individuals under 16. If we learn that a child under 16 has provided personal data, we will promptly delete the account. Parents or guardians may contact us to assist with account deletion.

International Information Transfers

FileLu is a United States company. We may transfer and store your information in the United States, Germany, or Finland, using secure and lawful safeguards as outlined above.

Law Enforcement and Legal Requests

We may disclose information as required by law, regulation, or court order, or when necessary to protect FileLu’s rights, users, or property. We may also share data to prevent fraud, investigate security incidents, or ensure compliance with applicable laws.

---

CCPA Compliance

This section applies to California residents under the California Consumer Privacy Act (CCPA). FileLu provides all users with the same level of protection, regardless of location.

• Right to Know what personal data is collected and shared.
• Right to Delete your personal data.
• Right to Non-Discrimination when exercising your privacy rights.

---

Important Things to Keep in Mind

Your Consent: By using this site you consent to the collection and use of information as described in this Privacy Policy.

Revoke Consent: You may revoke consent by deleting your account and all stored data via My Account.

Policy Updates: We may update this Privacy Policy periodically. Material changes will be posted on our website.

Contact Us: For questions, concerns, or privacy requests, contact us at FileLu Support or email [email protected].