Privacy Policy

Last updated: March 1, 2026

1. Introduction

This Privacy Policy describes how SFTPHub ("we", "us", "our") collects, uses, and protects your information when you use our managed SFTP hosting service. We respect your privacy and are committed to handling your data responsibly.

2. Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Name (first and last)
  • Password (stored hashed, never in plain text)

SFTP Credentials

When you create SFTP users, we store usernames, passwords, and SSH public keys. SFTP passwords and SSH keys are encrypted at rest using symmetric encryption.

Payment Information

Payments are processed by Stripe. We do not store your credit card number, CVC, or full card details on our servers. Stripe handles all payment data in accordance with PCI-DSS standards.

Your Files

Files you upload via SFTP are stored in isolated cloud storage. We do not access, read, scan, or analyze the contents of your files. Your storage is logically separated from other users.

Usage Data

We collect basic usage data including storage usage amounts and SFTP connection metadata (timestamps, IP addresses) for the purposes of billing, quota enforcement, and security monitoring.

3. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the Service
  • Process payments and manage your subscription
  • Enforce storage quotas and usage limits
  • Send transactional emails (account confirmations, password resets, billing notices)
  • Respond to support requests
  • Detect and prevent fraud or abuse

We do not sell, rent, or trade your personal information to third parties. We do not use your data for advertising purposes.

4. Third-Party Services

We use the following third-party services to operate SFTPHub:

  • Stripe — payment processing
  • Amazon Web Services (AWS) — file storage (S3)
  • DigitalOcean — application hosting and database
  • Google Analytics — website analytics (if enabled)

Each third-party service operates under its own privacy policy. We only share the minimum information necessary for each service to function.

5. Data Security

We take reasonable measures to protect your data, including:

  • Encryption of all SFTP transfers in transit via SSH
  • Encryption of stored SFTP credentials at rest
  • Isolated storage per account
  • Hashed account passwords
  • HTTPS for all web traffic

While we work hard to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and are not liable for unauthorized access resulting from circumstances beyond our reasonable control.

6. Data Retention

We retain your account information and files for as long as your account is active. If you cancel your subscription or close your account, we may retain your data for a reasonable period to fulfill any legal obligations, resolve disputes, or enforce our agreements.

After this period, your data will be permanently deleted. If you need your data exported before closing your account, download it via SFTP before cancellation.

7. Cookies

We use essential cookies to keep you logged in and maintain your session. If Google Analytics is enabled, it may set additional cookies for website analytics. We do not use cookies for advertising or tracking across other websites.

8. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information via your account settings
  • Delete your account and associated data by contacting us
  • Export your files at any time via SFTP
  • Opt out of marketing communications (we don't send them, but if we ever do, you can unsubscribe)

To exercise any of these rights, contact us at [email protected].

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Contact us at [email protected].