Privacy Policy

Who we are

Slingdrop is operated by Sansa Vision, the controller of personal data described here. Contact: support@slingdrop.my.

What we collect

• Account data: your email address, name, profile details and sign-in method (one-time code, magic link, Google or Apple).
• Content: files you upload, comments, approvals, versions and settings. Vault drops are end-to-end encrypted; we store only ciphertext and cannot read them.
• Usage and device data: IP address, approximate location derived from it (country and city), browser and device type, and actions such as views, page reading time and downloads. Recipients' views are counted with a first-party identifier so senders see unique views.
• Payments: when you subscribe in the iOS or Android app, the store and our subscription processor tell us your plan status. We never see your card details.
• Communications: messages you send to support and your notification preferences.

How we use it

• To provide Slingdrop: storing and delivering files, generating previews, showing analytics to senders, sending notifications you've asked for, and keeping your devices in sync.
• To keep Slingdrop safe: scanning uploads for malware and abuse, preventing spam and fraud, enforcing rate limits and our policies.
• To improve Slingdrop using aggregated, de-identified statistics.
• Legal bases (where GDPR applies): performance of our contract with you, our legitimate interests in running and securing the service, your consent where we ask for it, and legal obligations.

AI features

AI features run only when a user asks for them. Content is sent to model providers through our AI gateway with data collection disabled, so providers don't train on or retain it. Embeddings and transcripts we create are stored with the drop and deleted with it. Vault drops are never processed by AI.

Who we share it with

• People you share with: recipients see the drop and, where you allow, comments and other participants' names.
• Senders: if you view someone's drop, the sender sees view analytics. For private drops they see your verified email; for public drops they see anonymous counts, approximate location and device type.
• Service providers (subprocessors): Cloudflare (hosting, storage, databases, email delivery, AI inference, security), OpenRouter and the model providers it routes to (AI features, with data collection disabled), Resend (email delivery backup), Apple and Google (sign-in and in-app purchases). Each is bound by data protection terms.
• Legal reasons: when required by law or to protect rights, safety and the integrity of the service.
• We do not sell or rent personal data, and we don't use advertising trackers.

International transfers

Slingdrop runs on Cloudflare's global network, so data may be processed in countries other than yours. Where required we rely on safeguards such as standard contractual clauses.

Retention

Drops are deleted when they expire, when you delete them, or 30 days after you move them to Trash. Account data is kept while your account is active and deleted within 30 days after you delete your account, except where we must keep limited records for legal, security or tax reasons. Device inbox items are deleted after 30 days. Analytics are kept while the related drop exists.

Your rights

• You can access, export and delete your data at any time in Settings (Export my data, Delete account). Depending on where you live (including under the GDPR, the UK GDPR, Malaysia's PDPA and California's CCPA), you may also have rights to correct data, object to or restrict processing, withdraw consent and complain to a data protection authority.
• To exercise rights we can't offer in the app, email support@slingdrop.my. We'll respond within 30 days.

Security

We use encryption in transit and at rest, isolation of user content, access controls and monitoring. Vault drops add end-to-end encryption. See our Security page for details.

Children

Slingdrop isn't directed to children under 13, and we don't knowingly collect their data. If you believe a child has given us personal data, contact us and we'll delete it.

Changes

We'll post updates here and notify you of material changes by email or in the app.