Skypost

Privacy Policy

Last updated: April 2026

1. Who we are

Skypost Limited (“Skypost”, “we”, “us”) provides a file transfer service available at skypost.co.uk.

If you have any questions about this policy, you can contact us at: [email protected]

2. What this policy covers

This policy explains:

  • what data we collect
  • how we use it
  • how we store it
  • your rights

3. What data we collect

a) Account data (if you create an account)

  • Name (optional)
  • Email address
  • Password (stored securely as a hash — never plaintext)
  • Account settings and preferences

b) File transfer data

When you use Skypost, we process:

  • Files you upload
  • File names, sizes, and types
  • Folder identifiers and access passwords
  • Access logs (e.g. when a folder is viewed or downloaded)

c) Technical data

  • IP address (stored as a hashed value, not raw)
  • Device/browser information (user agent)
  • Usage activity (basic service operations only)

d) Payments

Payments are handled by Stripe. We store:

  • Stripe customer ID
  • Subscription details

We do not store card details.

4. How your files are handled

Encryption

Files stored by Skypost are encrypted at rest using modern encryption methods.

Each folder uses a unique encryption key derived from the access password and protected by a server-side key.

Important limitations

Skypost is not a zero-knowledge service.

This means:

  • We operate and control the encryption system
  • Authorised personnel may be able to access files where necessary for:
    • legal compliance
    • abuse investigation
    • security or technical support

Large file uploads

For large uploads (over ~50MB), files may be temporarily processed before encryption is finalised.

These files are encrypted immediately after processing and any temporary data is removed.

5. How we use your data

We use data to:

  • provide the file transfer service
  • manage accounts and subscriptions
  • prevent abuse and maintain security
  • respond to support requests
  • meet legal obligations

We do not:

  • sell your data
  • use advertising trackers
  • profile users for marketing

6. How long we keep data

  • Files are automatically deleted based on your plan
  • Expired folders are removed during cleanup processes
  • Account data is kept until you delete your account
  • Some data may remain in system backups for a limited period

7. Sharing your data

We only share data with trusted service providers:

  • Cloudflare (file storage and delivery)
  • Stripe (payments)
  • Abacus.AI (hosting and database infrastructure)

We do not sell or rent your data.

8. International transfers

Your data may be processed outside the UK (including the United States).

We rely on standard contractual safeguards provided by our service providers to ensure data protection.

9. Your rights

You have the right to:

  • access your data
  • correct inaccurate data
  • request deletion of your data
  • request a copy of your data

You can do this via your dashboard or by contacting us.

10. Security

We use:

  • encryption
  • access controls
  • rate limiting
  • secure authentication

to protect your data.

11. Abuse and misuse

We may access or remove content where necessary to:

  • comply with law
  • investigate abuse
  • protect users and the service

12. Changes to this policy

We may update this policy from time to time. We will update the “Last updated” date when changes are made.