GDPR & Data Protection
Last Updated: October 12, 2026 · Privacy by Design Standard
SendFiles.in adheres strictly to the European Union General Data Protection Regulation (Regulation (EU) 2016/679) and the UK Data Protection Act.
Why P2P Technology Exceeds Traditional Compliance Standards
Traditional cloud hosters act as persistent data processors that store files on disk, creating legal liabilities, risk of breaches, and compliance headaches. Because SendFiles.in operates as an ephemeral peer-to-peer signaling utility, we do not store personal customer data or host file contents.
How We Satisfy Key GDPR Principles
Data Minimization
We process only the bare minimum technical data (ephemeral session keys) strictly required to negotiate WebRTC signaling. No unnecessary metadata is captured.
Storage Limitation
Our servers store zero bytes of file payloads on disk. Ephemeral signaling rooms self-destruct within 10 minutes, leaving zero residual server history.
Right to Erasure ('Right to be Forgotten')
Because we never store personal accounts, identifiers, or transmitted file contents in any persistent database, user data is erased by default upon transfer completion.
Data Protection by Design & by Default
SendFiles.in is built from the source code level with end-to-end client-side encryption and peer-to-peer data channels that make unauthorized inspection technically impossible.
Security of Processing
Direct transfers use modern WebRTC DTLS 1.3 transport encryption paired with client-side AES-256-GCM cipher suites to protect against man-in-the-middle attacks.
International Data Transfers
Transfers travel directly between peer endpoints worldwide without being collected, processed, or pooled into centralized international server buckets.
Questions Regarding GDPR Rights?
For regulatory inquiries, compliance audits, or data rights questions, contact our designated privacy representative.