Your files are yours.

This page explains what exakt collects when you use it, what we do with it, and how to get rid of it.

What we collect

We collect the minimum needed to move your files and keep the service safe.

Account details: the email address and name you sign in with, handled by our sign-in provider, Clerk. You can also set a display name inside exakt.
Your files: the files you upload, their names, folder paths, sizes, types, and a SHA-256 checksum of each one. We do not open, scan the contents of, or alter your files.
Transfer settings: how you chose to share each transfer, invited email addresses, expiry dates, download limits, and a hashed copy of any password you set. We never store the password itself.
Download records: when a file on a transfer is downloaded, we record the time and whether the downloader was signed in or used a link.
Usage analytics: page views and product events such as starting or completing a transfer, collected with PostHog. Analytics never include file contents or file names.

How we use it

To store and deliver your files exactly as you sent them, and to verify them on arrival.
To enforce the privacy settings you choose on each transfer.
To show recipients who sent them a transfer. Recipients see your display name, never your email address.
To keep the service working and fair: rate limits, storage limits, and abuse detection.
To understand how exakt is used so we can improve it.

Where it lives

File bytes are stored in Cloudflare R2. Uploads and downloads go directly between your browser and R2 over short-lived signed URLs.
Account records, transfer settings, and download records are stored in Convex.
Sign-in is handled by Clerk. Analytics are processed by PostHog in the United States.

How long we keep it

Files stay until you delete the transfer they belong to. Deleting a transfer removes its files from storage.
Uploads that are never finished are discarded automatically after 24 hours.
Expired transfers and transfers past their download limit stop being downloadable at once; their files remain until you delete them.
Deleting your account removes your profile, transfers, and files.

Cookies

exakt uses cookies to keep you signed in and to tell returning visitors apart in analytics. We do not use advertising cookies and we do not sell or share your data with advertisers.

Your choices

You can change your display name, delete transfers, and delete your account from the dashboard at any time.
You can rotate or make private any share link you have created.
To ask what we hold about you or to request removal, email us at the address below.

Children

exakt is not directed at children under 13, and we do not knowingly collect information from them.

Changes

If this policy changes in a way that matters, we will update the date at the top of this page and, where practical, tell you inside the app.

Contact

Questions about privacy go to hello@exakt.space.