Privacy notice

What we store

• Your account: name, email address, a hashed password (Argon2id) if you set one, and your Google account ID and profile photo address if you sign in with Google.
• Your files: the files you upload or save, kept in a private Cloudflare R2 storage bucket, plus their details in our database: name, type, size, owner, versions and who they are shared with. We keep the last 10 versions of each file.
• Sign-in sessions: for each signed-in device, a hashed session token, the browser name and IP address, so you can stay signed in and we can detect stolen sessions.
• Messages you send us through the contact form, with the IP address they came from (to stop abuse).
• Questions you ask Vyn, the guide on our public pages, with the page you asked from. They go to Vyntez AI to be answered; Vyn can’t see your account or your files.

What we don’t do

• No third-party analytics, tracking scripts, advertising or social media pixels, on the website or in the apps.
• We don’t sell or rent your data, and we don’t read your files.
• Fonts and scripts are served from our own servers, so loading a page doesn’t tell anyone else you visited.

Cookies and local storage

We use only the cookies needed to keep you signed in: an access cookie and a refresh cookie (which scripts on the page cannot read) and a security cookie that protects against cross-site request forgery. While you sign in with Google, a short-lived cookie remembers the sign-in attempt for up to 10 minutes.

When you use the apps, your browser keeps copies of recently opened files and your Recent lists on your device so they work offline. Signing out clears them.

Who can see your files

Only you, the people you share a file with, and anyone holding a share link you created (until it expires or you turn it off). Files are never public: every open or download uses a link that expires within minutes.

Service providers

• Cloudflare stores file contents (R2).
• Our hosting provider runs the website, the API and the database on a server we manage.
• Google, only if you choose “Continue with Google”, to confirm who you are.
• Our email provider delivers account emails (confirm address, reset password) and contact-form messages.

Deleting things

Files you delete go to your trash and are permanently deleted, with all their versions, after 30 days, or straight away if you empty them from the trash. You can delete your account, and every file you own, at any time from Account and storage.

Contact

Questions about privacy: info@vyntez.com.