homeaboutvideotry it nowpricingdocs

Privacy Policy

This Privacy Policy describes how CD2 Solutions Ltd. (“CD2”, “we”, “us” or “our”) uses personal information when you use the Fileboy website and related services available at fileboy.io (together, the “Service”).

By using the Service you acknowledge this Privacy Policy. If you do not agree with it, you must not use the Service.

Who we are

The Service is operated by CD2 Solutions Ltd., a company registered in England and Wales. Our registered office is 21-23 Whiffler Road, Norwich, NR3 2AG, United Kingdom.

For privacy enquiries you can email hello@fileboy.io. For broader company matters you may also contact us at web@cd2solutions.co.uk.

For the purposes of UK data protection law, CD2 Solutions Ltd. is the controller of personal information collected through the Service (except where we process personal information solely on behalf of our customers as a processor — see “Content you upload” below).

Information we collect

Depending on how you use the Service, we may collect:

  • Account and profile information — such as your name, email address, organisation name, and credentials when you register or sign in. If you use optional sign-in providers (for example Google), we receive certain profile details from that provider according to your settings with them.
  • Billing information — billing contact details and subscription records. Card payments are processed by Stripe; we do not store your full payment card details on our systems. Stripe receives payment and billing data needed to complete transactions and is governed by its own privacy notice.
  • Content you upload — files, images, videos and other materials you send through Fileboy, together with associated metadata (such as filenames, sizes, formats and timestamps) needed to store, transform and deliver that content. Where you use Fileboy on behalf of your own customers or end users, you are responsible for providing them any notices and obtaining any consent required by applicable law.
  • Usage and technical information — such as IP address, browser type, device information, approximate location derived from IP, pages viewed and actions taken in the Service, API usage, diagnostic logs and timestamps. We use this to operate, secure and improve the Service and for troubleshooting.
  • Cookies and similar technologies — as described in our Cookie Policy, including cookies required for sessions and preferences, and analytics cookies that help us understand how the site is used.
  • Communications — the contents of emails or support requests you send us, and records we keep in connection with those conversations.
  • Marketing — where we offer optional mailing lists or product updates and you choose to subscribe, we process your contact details for that purpose. You can unsubscribe using the link in any marketing email or by contacting us.

How we use your information

We use personal information to:

  • provide, operate and maintain the Service (including accounts, APIs and dashboards)
  • process subscriptions and payments, issue invoices and comply with financial record keeping obligations
  • store, process, transform and deliver files and media you upload, as instructed by your use of the product
  • secure the Service, prevent abuse and fraud, monitor performance and diagnose faults
  • communicate with you about the Service (including technical notices and changes to terms or policies)
  • send optional marketing where you have agreed to receive it, or where otherwise permitted by law
  • comply with legal obligations and enforce our Terms and Conditions

Our lawful bases under UK GDPR include: performance of a contract with you; legitimate interests in running and improving a secure SaaS product (balanced against your rights); consent where required (for example certain cookies or marketing); and legal obligation where applicable.

Sharing and processors

We share personal information with third parties only where needed to provide the Service or as required by law. Categories of recipients include:

  • Payment processing — Stripe (and its subprocessors) for subscription billing.
  • Analytics — we use Google Analytics on the website to understand aggregate usage; you can read more about Google’s practices and opt-out options via Google’s documentation and our Cookie Policy.
  • Infrastructure and communications — hosting, email delivery and other IT vendors who process data on our instructions under appropriate agreements.
  • Professional advisers — such as lawyers or accountants where legitimately required.
  • Authorities — regulators, courts or law enforcement when we believe disclosure is necessary to comply with law or protect rights and safety.

We do not sell your personal information. Any transfer of personal information in connection with a merger, acquisition or sale of assets will be subject to appropriate safeguards and notices as required by law.

International transfers

Your information may be processed in the United Kingdom and in other countries where our suppliers operate. Where personal information is transferred outside the UK, we use appropriate safeguards recognised under UK law (such as the UK International Data Transfer Agreement or adequacy regulations), unless an exception applies.

Retention

We keep personal information only for as long as needed for the purposes above, including providing the Service, meeting legal, tax and accounting requirements, and resolving disputes. Retention periods vary depending on the type of data and whether you maintain an active account. Content you upload may be deleted when you remove it or close your account, subject to backup and technical retention cycles.

Security

We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure or destruction. No method of transmission over the Internet is completely secure; we encourage you to use strong passwords and protect your account credentials.

Your rights

Under UK data protection law you may have the right to request access, correction or erasure of your personal information, to restrict or object to certain processing, to withdraw consent where processing is consent-based, and to complain to the Information Commissioner’s Office (ico.org.uk). To exercise your rights, contact us at hello@fileboy.io. We may need to verify your identity before responding.

Children

The Service is intended for businesses and developers and is not directed at children. We do not knowingly collect personal information from anyone under the age of 13 (or 16 where a higher age applies under local law for consent). If you believe we have collected such information, please contact us and we will take steps to delete it.

Changes

We may update this Privacy Policy from time to time. The current version will always be posted on this page with an updated “Last updated” date. Where changes are material, we may notify you by email or a notice on the Service.

Last updated: 12 May 2026