Privacy & AI
A plain-English summary of what GetYourDrop does with your files. This page is not legal advice and does not claim compliance with any particular regulation.
Your files
Files are stored privately in object storage and are only reachable through short-lived signed links, issued after we check the transfer is still live. Anyone who has an active share link can download its files, so treat links like keys and disable them when you no longer need them.
Expiry and deletion
When a transfer expires, is disabled or deleted, access stops immediately. Expired and deleted files are then permanently erased from storage by a background job, normally within about a day. Previous versions on permanent links are kept only up to your plan's history limit and are visible only to you.
What the checks look at
“Check My Files” and “Organise” are optional. Without AI they use file names, sizes, detected file types, SHA-256 fingerprints (for exact duplicates) and an image-sharpness measurement computed on our own servers.
What is sent to an AI provider
Only if you leave “Include AI suggestions” ticked: the file names, sizes, types and image dimensions in that transfer, plus any checklist you typed. File contents are never sent — except small, low-resolution image previews (at most 12) if you separately tick “Let AI look at small image previews” when organising. AI suggestions are labelled as such and never change or remove files without your approval.
Analytics
We count when a download page is opened and when a download starts, with a timestamp. We don't store recipients' IP addresses, names or emails, and we can't tell who opened a link. Owners can switch counting off per link. For abuse prevention we keep short-lived, hashed rate-limit counters.
Malware
Files are never opened or executed by GetYourDrop. Recipients see a warning for program and script files. Operators can connect a ClamAV scanner; when one is configured, files it flags are blocked.