Your content is yours.
Last updated: June 6, 2026
We don’t use your files to train AI, we don’t sell them, and we promise to keep them secure. Here’s how we look after your content and your data.
- Your content belongs to you — we never claim ownership of your files.
- We don’t use your files to train AI or machine-learning models.
- We don’t sell your personal information or the contents of your transfers.
- Files are encrypted and permanently deleted after their retention window.
1. Introduction
This Privacy Policy explains how TransferBay (“TransferBay”, “we”, “us”, or “our”) collects, uses, shares, and protects personal information when you use our file-transfer and file-sharing service at transferbay.com and any related applications, APIs, and tools (together, the “Services”).
It applies to everyone who interacts with the Services — whether you create an account, send a transfer, or simply receive and download files someone has sent you. By using the Services, you acknowledge that you have read and understood this Privacy Policy. It should be read together with our Terms & Conditions.
2. Who We Are & Data Controller
TransferBay is the operator of the Services and is the data controller responsible for the personal information described in this policy, except where we process the contents of your files on your behalf — in which case we act as your data processor and you are the controller (see “How we handle the personal data inside your files” below).
You can reach us about privacy matters at support@transferbay.com or by writing to us at Sharjah Media City, Sharjah, Dubai, United Arab Emirates.
3. Information We Collect
We collect information in three ways: information you give us directly, information we collect automatically when you use the Services, and information we receive from third parties.
3.1 Information you provide to us
Account information: your name and email address, and a password or single-sign-on identifier, when you create an account.
Transfer information: the files you upload, any message or description you add, the file names, and the email addresses of recipients you choose to send to.
Billing information: your plan and billing details when you subscribe to a paid plan. Payment card details are collected and processed directly by our payment processor — we do not store full card numbers on our systems.
Support and communications: the information you include when you contact us, report a transfer, or respond to a survey.
3.2 Information we collect automatically
Usage and device data: your IP address, browser and device type, operating system, language settings, referring pages, and the actions you take within the Services, such as creating, sending, and downloading transfers.
Cookies and similar technologies: small files and identifiers used to keep you signed in, remember your preferences, secure the Services, and understand how the Services are used (see the Cookies section below).
3.3 Information from third parties
When you sign in using a single-sign-on provider, we receive basic profile information (such as your name and email address) from that provider. We may also receive information from our payment, security, and analytics providers to help us operate, secure, and improve the Services.
4. How We Use Your Information
We use the information we collect to:
(a) provide, operate, and maintain the Services — including storing your files, generating download links, and delivering email transfers;
(b) create and manage your account and process your payments;
(c) communicate with you about your account, transfers, security, and service updates, and respond to your requests;
(d) keep the Services secure — detecting, preventing, and investigating fraud, abuse, malware, spam, and prohibited content;
(e) understand and improve the Services and develop new features; and
(f) comply with our legal obligations and enforce our Terms & Conditions.
We do not use the contents of your files to train artificial-intelligence or machine-learning models — ours or anyone else’s (see the section on AI and your content below).
5. Legal Bases for Processing
Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases to process your personal information:
Performance of a contract: to provide the Services you request, manage your account, and process transfers and payments.
Legitimate interests: to secure and improve the Services, prevent abuse and fraud, and run our business — balanced against your rights and interests.
Legal obligation: to comply with applicable laws, respond to lawful requests, and keep records we are required to keep.
Consent: for optional activities such as marketing communications or features that expressly ask for your permission. You can withdraw consent at any time.
7. How We Handle the Personal Data Inside Your Files
When you upload files that contain other people’s personal data, you are the controller of that data and TransferBay acts as your processor. We process the contents of your files only to provide the Services — for example, to store them, deliver them to your recipients, and scan them for malware and prohibited content.
You are responsible for having a lawful basis to upload and share such data and for honouring the rights of the individuals it concerns. We do not access the contents of your files except as needed to operate, secure, and support the Services, or where required by law.
9. International Data Transfers
TransferBay operates as a global business. Your information may be stored and processed in countries other than the one in which you live, including countries whose data-protection laws differ from yours.
Where we transfer personal data across borders, we put appropriate safeguards in place as required by applicable law — such as the European Commission’s Standard Contractual Clauses or equivalent mechanisms — to ensure your data remains protected. You can contact us at support@transferbay.com for more information about these safeguards.
10. How We Protect Your Information
We protect your information using industry-standard technical and organisational measures, including encryption of files in transit and at rest, access controls, network protections, and continuous monitoring of our systems. We limit access to personal information to personnel and providers who need it to operate the Services.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You also play a role in keeping your information safe — use a strong, unique password, keep your credentials confidential, and use the protections we offer for sensitive transfers. If you believe your account or a transfer has been compromised, contact us promptly at support@transferbay.com.
11. How Long We Keep Your Information
We keep personal information only for as long as we need it for the purposes described in this policy, or for as long as the law requires.
Files are stored only for the retention window associated with the transfer and your plan, after which they are permanently deleted from our active systems. You can also delete a transfer manually at any time. Account information is kept while your account is active and for a reasonable period afterwards to meet legal, accounting, security, and dispute-resolution needs. Residual copies may persist briefly in encrypted backups before being overwritten in the ordinary backup cycle.
12. Your Rights & Choices
Depending on where you live, you may have some or all of the following rights regarding your personal information:
(a) access the personal information we hold about you and request a copy;
(b) correct information that is inaccurate or incomplete;
(c) delete your personal information in certain circumstances;
(d) restrict or object to certain processing, including processing based on legitimate interests;
(e) port your information to another service, where technically feasible;
(f) withdraw consent where we rely on it; and
(g) lodge a complaint with your local data-protection authority.
You can manage much of your information from your account settings, or exercise these rights by contacting support@transferbay.com. We will respond within the time required by applicable law. You can also unsubscribe from marketing emails at any time using the link in each message; we will still send you essential service messages.
13. AI & Your Content
We do not use your files or the contents of your transfers to train, fine-tune, or develop artificial-intelligence or machine-learning models — neither ours nor any third party’s — and we do not sell or share your content with others for that purpose.
Any automated processing we apply to your content (such as malware scanning, spam detection, and abuse or copyright enforcement) exists solely to operate and protect the Services. We will only use your content to train AI or machine-learning models if you give your explicit, separate consent — which you can withdraw at any time.
14. Children’s Privacy
The Services are not intended for children under 16, or under the age of digital consent in your country if higher, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us at support@transferbay.com and we will take steps to delete it.
15. Third-Party Links & Services
The Services may contain links to, or integrate with, third-party websites and services that we do not control. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party service you use.
16. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page and, where the changes are significant, notify you through the Services or by email.
Your continued use of the Services after an updated policy takes effect constitutes your acceptance of the changes.
17. How to Contact Us
If you have questions, concerns, or requests about this Privacy Policy or your personal information, email us at support@transferbay.com.
You can also write to us at Sharjah Media City, Sharjah, Dubai, United Arab Emirates.