Privacy Policy

1. What we collect

We split the data we hold into four buckets. Each is collected for a specific purpose (see § 2) and held only as long as that purpose requires (see § 4).

2. Why we collect it

Every category of data has a lawful basis and a clear purpose. We do not collect data “just in case.”

• a
  To operate the service.

  Account data and technical data are needed to authenticate you, serve files, generate share links, run downloads, and protect uptime.

• b
  To enforce our Terms.

  IP addresses and access logs help us detect abuse, prevent fraud, and act on reports submitted through our Trust & Safety channels.

• c
  To calculate earnings.

  If you participate in the earnings programme, we use download events and IP information to calculate fair, non-manipulated payouts.

• d
  To improve the product.

  Anonymous, aggregated technical data helps us spot performance issues, slow pages, and confusing flows so we can fix them.

• e
  To communicate with you.

  We use your e-mail to send transactional messages (account, payouts, password resets) and, only if you opt in, occasional product updates.

3. Who we share data with

We do not sell your data. We share only what is necessary, only with the recipients below, and only for the purpose listed next to each.

• Payment processors.

  For premium purchases and payouts — processed by the gateway you choose at checkout. They receive only the data they need to complete the transaction.

• Our file storage servers.

  Uploaded files are routed to our storage layer for hosting and delivery. They never leave our infrastructure.

• Advertising partners.

  If ads are shown on a page you visit, our partners may set their own cookies and receive non-identifying technical data. You can manage these preferences in your browser.

• Law enforcement & rights holders.

  When required by a valid legal request or in response to a DMCA notice, we share the minimum information necessary to comply. We push back on overbroad requests.

4. How long we keep it

• Account data.

  Held while your account is active. If you delete your account, we remove your personal data within a reasonable period, retaining only what we’re legally required to keep (e.g. payment receipts for accounting).

• Uploaded files.

  Kept according to the storage policy of your account tier. Files deleted by you are removed from search and download immediately and purged from storage on our standard schedule.

• Logs.

  Technical and access logs roll over on a short retention window (typically a few weeks) unless they are tied to an open abuse investigation.

5. Your rights

Regardless of where you live, you have meaningful control over the personal data we hold. To exercise any of these rights, write to [email protected] from the e-mail address on your account — we’ll reply within 30 days.

• 1
  Access.

  Request a copy of the personal data we hold about you.

• 2
  Correction.

  Have inaccurate or incomplete personal data corrected without delay.

• 3
  Deletion.

  Have your data erased, subject to legal retention obligations we’re bound by.

• 4
  Portability.

  Receive your personal data in a machine-readable format you can take elsewhere.

• 5
  Object & restrict.

  Object to specific uses of your data or ask us to restrict processing while a dispute is being resolved.

• 6
  Withdraw consent.

  Withdraw any consent you previously gave (for newsletters, analytics, etc.) at any time, with no penalty.

6. Cookies

We use a small number of first-party cookies to keep you logged in and remember your preferences, and a limited set of third-party cookies for anonymous analytics and (where applicable) advertising. You can clear or block cookies through your browser at any time; the service may not work properly if you disable strictly-necessary cookies.

7. Security

We protect your data with TLS in transit, hashed passwords at rest, access controls on our internal systems, and routine audits. No platform on the internet is 100 % breach-proof — if we ever detect an incident that materially affects your data, we’ll notify you promptly and explain what to do.

8. Children

Mega4up is not directed at children under the age of 13. We do not knowingly collect personal data from anyone in that age group. If you believe a child has provided us with personal data, please contact [email protected] and we’ll remove it.

9. Changes to this policy

We may update this policy from time to time. The current version is always published on this page. For changes that materially affect you, we’ll give reasonable notice through the service or by e-mail before the change takes effect.