What we collect
- Account info you provide (name, email, password hash) when you sign up.
- Billing and payment details processed by Stripe — we never store full card numbers.
- Service order details (project briefs, files you upload) needed to deliver the work.
- Standard server logs (IP, user-agent, timestamps) for security and abuse prevention, retained for 30 days.
- Cookies strictly required for authentication and session continuity.
Why we collect it
- To provide the service you signed up for.
- To send transactional emails about your account, payments, and projects.
- To respond to support requests.
- To meet legal and tax obligations.
We do not sell your personal data. We do not use third-party analytics or ad tracking.
Where it lives
Application data is stored on Filenod-controlled infrastructure with encryption at rest for sensitive fields (API keys, secrets). Backups are encrypted and kept for up to 14 days. Card data is held by Stripe under their PCI-DSS compliance.
Sub-processors
We rely on a small number of vendors to operate the service:
- Stripe — international card payments and subscriptions.
- Resend — transactional email delivery.
- Hostinger — domain registrar and DNS for filenod.com.
- Cloud providers (currently a single VPS; AWS / GCP if and when we scale out) for running the infrastructure.
Your rights
You can access, correct, export, or delete your account data at any time by emailing info@filenod.com. We respond within 30 days. If you are in the EU/UK, you also have the right to complain to your local data protection authority.
Mobile app
The Filenod Android app (com.filenod.app) is a thin client for the same platform. It stores your session token in Android Keystore-backed SecureStore, transmits all data over HTTPS to app.filenod.com, and never collects location, contacts, calendar, photos, microphone, or camera data — those permissions are not requested.
With your permission it registers an Expo Push token so we can notify you when admins reply to a project message, confirm a meeting, or send a quote. Expo Push only ever sees the token and the notification body. We never use it for marketing.
Deleting your account through info@filenod.com removes your push tokens along with all other account data.
Children
Filenod is not directed at children under 16. We do not knowingly collect their data.
Changes to this policy
We’ll post a revised version with a new “last updated” date and email customers about material changes.
Contact
Privacy questions? info@filenod.com.
