Legal

Privacy Policy

Last updated: May 2026 · Syxlor

          We collect as little data as possible. Files are automatically deleted after link expiry (4 hours by default). No user accounts are required.
        

1. What We Collect

When you use Syxlor Upload, we process the following information:

The file you upload (stored temporarily until link expiry (4 hours by default); quarantined failed uploads remain private for up to 24 hours)
Your IP address (logged securely for abuse prevention and rate limiting)
Basic request metadata (browser type, timestamp)
A short-lived session token stored in a cookie to validate your upload request

2. How We Use Your Data

To deliver the secure file transfer service
To enforce upload limits, malware scanning, and prevent abuse
To automatically securely delete files after expiry

We do not sell, share, or use your data for advertising or analytics. All logs are securely rotated and kept only for diagnostic and security purposes.

3. File Storage & Expiry

Uploaded files are stored on secure servers and are automatically and permanently deleted when the link expires (4 hours by default). Download links become invalid after expiry. We do not retain backups of user-uploaded files beyond their expiry period.

4. Cookies & Sessions

We use a strict single-session token mechanism to validate that your upload request originates from a legitimate page session. This prevents cross-site request forgery (CSRF). No tracking or advertising cookies are used.

5. Data Sharing & Processing

We do not share your data with third parties except where required by law. Uploaded files are strictly isolated from execution environments and subjected to multiple layers of automated malware analysis.

6. Security

Downloads links are public once generated — anyone with the link can download the file until it expires. Do not share files containing sensitive information unless you control who receives the link. Syxlor implements state-of-the-art protections against malicious uploads, but you are responsible for the confidentiality of the links you generate.

7. Your Rights

Because we do not require accounts or store personal profiles, most data rights (access, deletion) are fulfilled automatically by the 4-hour expiry. To request early deletion of a file or for any privacy concern, contact us at contact@tasfiqahmed.com.

8. Changes to This Policy

We may update this policy from time to time. The "Last updated" date above will reflect any changes. Continued use of the service constitutes acceptance.

9. Contact

Tasfiq Ahmed — contact@tasfiqahmed.com