Privacy Policy — SecureShare
Last updated: March 13, 2026 • Operated by VBro Technology
1 Introduction
Welcome to SecureShare ("we," "us," or "our"), a secure file transfer service operated by VBro Technology. We are committed to protecting your privacy and ensuring you have a positive experience. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at vbrotechnology.com.
2 Information We Collect
We collect information necessary to provide our file transfer service:
- Account Data: When you register, we collect your name, email address, and encrypted password.
- File Data: File names, sizes, upload timestamps, and encrypted file content. All files are encrypted using AES-256-GCM encryption before storage.
- Technical Data: IP addresses, browser type, operating system, device information, and access timestamps for security monitoring.
- Usage Data: Upload/download activity, session information, and interaction patterns to improve service quality.
- Communication Data: If you contact us, we store your name, email, and message content.
3 How We Use Your Information
We use your information strictly for the following purposes:
- Service Delivery: To process file uploads, generate secure download links, and manage file expiry.
- Account Management: To authenticate users, manage storage quotas (up to 1GB), and provide dashboard features.
- Security: To detect brute-force attacks, enforce IP-based rate limiting, monitor suspicious activity, and protect against unauthorized access.
- Email Communications: To send email verification, password reset links, and contact form confirmations via our SMTP service.
- Service Improvement: To analyze usage patterns and improve the platform's performance and features.
4 File Encryption & Security
Your security is our top priority. SecureShare implements the following measures:
- AES-256-GCM Encryption: All uploaded files are encrypted at rest using military-grade AES-256-GCM encryption.
- Password Protection: Optional password protection for individual file downloads with bcrypt hashing.
- CSRF Protection: All forms are protected against Cross-Site Request Forgery attacks.
- Rate Limiting: Download rate limiting (max 5 downloads per file per IP) to prevent abuse.
- IP Monitoring: Suspicious IP addresses are tracked and automatically banned after repeated violations.
- Automatic Deletion: Files are automatically purged from the server after 1 day(s) for guest users. Registered users may have extended or lifetime backup options.
5 Data Retention & Deletion
We retain data only as long as necessary:
- Guest Files: Automatically deleted after 1 day(s) from upload.
- Registered User Files: Retained based on your backup settings (365-day or lifetime backup).
- Deleted Files: Permanently removed from the server — not recoverable.
- Account Data: Retained while your account is active. You may request deletion by contacting us.
- Audit Logs: Security logs are retained for up to 90 days for incident investigation.
6 Third-Party Disclosure
We do not sell, trade, or share your personal information with third parties except:
- Legal Requirements: If required by law, court order, or government request.
- Service Providers: We use ZeptoMail (ZOHO) for transactional emails. No file data is shared with email providers.
- Advertising: We may display Google AdSense advertisements. Google may use cookies for ad personalization per their privacy policy.
7 Cookies & Tracking
We use essential cookies for:
- Session management and authentication
- CSRF token storage for security
- Timezone detection for accurate file expiry display
- Google AdSense may use third-party cookies for ad delivery
8 Your Rights
You have the right to:
- Access, update, or delete your account data via your Dashboard.
- Request a copy of your personal data held by us.
- Opt out of non-essential communications.
- Delete your files at any time from your Dashboard.
- Contact us to request complete account deletion.
9 Children's Privacy
SecureShare is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If we discover we have collected data from a child under 13, we will delete it immediately.
10 Changes to This Policy
We reserve the right to modify this Privacy Policy at any time. Changes take effect immediately upon posting. We encourage you to review this page periodically. Continued use of the service after changes constitutes acceptance.
11 Contact Us
If you have questions about this Privacy Policy, please contact us:
- Email: mukk47@gmail.com
- Phone: +91 8955049990
- Website: vbrotechnology.com
- Contact Form: Submit a message