Data processing
How iShared.app handles the files and personal data you send through it, and how to request a Data Processing Agreement.
When you use iShared.app to send a file, you're acting as the data controller for anything personal contained in it, and we act as a processor - storing and delivering it on your behalf, not using it for our own purposes.
What we do with a transfer
- Files are stored in encrypted S3 storage until their expiry date, then the link stops working.
- We don't scan, read, or otherwise process the contents of your files beyond what's needed to store and deliver them (and, for image/video previews where offered, to generate that preview).
- Recipient email addresses you provide are used only to deliver the notification for that transfer.
See how transfer expiry works for what happens to files after they expire.
Sub-processors
We use a small number of third-party services to run iShared.app - see the full list on sub-processors.
Requesting a Data Processing Agreement
If your organization requires a signed DPA to use iShared.app under GDPR or similar regulations, contact us and we'll get one in place. We don't publish a self-serve template here, since a DPA needs to reflect your organization's specific processing details rather than a generic form.
Data subject requests
If you're an individual whose personal data was included in a transfer sent by someone else, we're a processor for that data, not the controller - requests to access, correct, or delete it should go to whoever sent the transfer. If you're an iShared.app account holder wanting to exercise your own rights over your account data, see our Privacy Policy for how to reach us.