GDPR

We never receive your file content in readable form. Files are encrypted on the sender's device before leaving it. We never receive your decryption keys in usable form. We do not see your biometric data or your passkey private keys.

Account email addresses, file metadata (names, sizes, type, timestamps), recipient email addresses, access events (when a file was opened, from where), and the technical identifiers used by our coherence engine to detect suspicious access patterns.

Our primary database is hosted in Zurich, Switzerland — a country the European Commission has formally recognised as providing an adequate level of data protection. Encrypted file storage and key management are in the European Union (AWS eu‑north‑1, Stockholm), as is our application runtime (Paris) and our backup email path (Ireland). Sub-processors outside the EU and Switzerland are listed in our privacy notice; transfers rely on the European Commission's Standard Contractual Clauses.

Under GDPR you have the right to access, rectify, port, restrict, or erase your personal data, and to object to certain processing. You may also lodge a complaint with your local supervisory authority. Send requests to hello@aspisfile.com; we respond within 30 days.

For privacy enquiries, write to hello@aspisfile.com.