Data Privacy Policy

Introduction

Welcome to Filename.bot ("we," "our," "us"). We are committed to protecting and respecting your privacy. This Data Privacy Policy outlines how we collect, use, store, and protect your information when you use our service, which allows users to upload files and have them automatically renamed using AI. This policy complies with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

Information We Collect

Personal Information

We may collect the following personal information:

• Contact Information: such as your name, email address, and phone number.
• Payment Information: such as credit card information, billing address, and other financial data for processing payments through Stripe.
• Account Information: such as username, password, and account settings.

Uploaded Files

File Data: The files you upload for processing, including their contents and metadata, are temporarily stored and processed using our service.

Usage Data

We may collect information about how you use our service, including:

• Device Information: such as IP address, browser type, and operating system.
• Activity Information: such as pages visited, actions taken, and time spent on our website.

How We Use Your Information

Service Provision

• To process and rename your uploaded files using AI.
• To manage and maintain your account.
• To process payments and manage billing through Stripe.

Improvement and Analytics

• To analyze usage patterns using Cloudflare Web Analytics, PostHog, and Supabase to improve our service.
• To monitor and improve the performance of our service.

Communication

• To send transactional emails and notifications using Resend.
• To respond to your inquiries and provide customer support.

Legal and Compliance

• To comply with legal obligations and enforce our terms of service.

Legal Bases for Processing (GDPR)

We rely on the following legal bases for processing your personal information:

• Contractual Necessity: Processing your information is necessary to perform the contract with you (e.g., to provide our service).
• Consent: We may process your information based on your consent (e.g., for marketing communications).
• Legitimate Interests: We process your information to pursue our legitimate interests (e.g., to improve our services), provided that those interests are not overridden by your rights and interests.
• Legal Obligation: We may process your information to comply with legal obligations.

Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal information:

• Access: You can request access to your personal information we hold.
• Correction: You can request correction of inaccurate or incomplete information.
• Deletion: You can request deletion of your personal information, subject to certain exceptions.
• Objection: You can object to the processing of your personal information under certain circumstances.
• Restriction: You can request restriction of processing of your personal information.
• Data Portability: You can request a copy of your personal information in a structured, machine-readable format.
• Withdrawal of Consent: You can withdraw your consent at any time where we relied on your consent to process your personal information.

To exercise these rights, please contact us at [email protected].

Your Rights Under CCPA

If you are a California resident, you have the following rights regarding your personal information:

• Access: You can request information about the categories and specific pieces of personal information we have collected about you.
• Deletion: You can request deletion of your personal information, subject to certain exceptions.
• Opt-Out: You can opt out of the sale of your personal information. Note: We do not sell personal information.
• Non-Discrimination: You have the right not to be discriminated against for exercising any of your CCPA rights.

To exercise these rights, please contact us at [email protected].

Third-Party Services

We use third-party services to operate our service and process your data. Each of these services has its own privacy policy, which we encourage you to review:

• Cloudflare: We use Cloudflare for hosting and web analytics.
• PostHog: We use PostHog for product analytics.
• Supabase: We use Supabase for database hosting.
• Stripe: We use Stripe for payment processing.
• OpenAI: We use OpenAI for API file processing.

How We Share Your Information

We do not sell or rent your personal information to third parties. However, we may share your information with:

• Service Providers: such as Cloudflare, Supabase, PostHog, Resend, Stripe, and OpenAI, who assist us in operating our service.
• Legal Authorities: if required by law or to protect our rights and the rights of others.

Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure server infrastructure, and regular security audits.

Data Retention

We retain your personal information and file data for as long as necessary to provide our service and fulfill the purposes outlined in this policy. We may retain certain information to comply with legal obligations, resolve disputes, and enforce our agreements.

Changes to This Policy

We may update this Data Privacy Policy from time to time. We will notify you of any changes by posting the new policy on our website and updating the effective date.