Privacy Policy

Vidual Send (“Send”, at vidualsend.com) is a free file-transfer tool operated by Where Beagles Dare Ltd(“Vidual”, “we”, “us”), a company registered in England and Wales. We are the data controller for the personal data described here. For any privacy question, or to exercise your rights, email legal@vidualspaces.com.

Send is separate from the Vidual Spaces app and accounts, which have their own privacy policy. This policy covers only the Send transfer tool.

To send a transfer we handle a small, deliberate set of data:

• Your email (the sender).To confirm it’s really you, deliver your transfer, and protect the service from abuse. Lawful basis: performance of the service you ask us for, and our legitimate interest in preventing misuse.
• Recipient email(s). The addresses you enter so we can tell your recipients there are files for them. We use them only to deliver this transfer — we do not market to recipients. Lawful basis: our legitimate interest in delivering the transfer you requested.
• Your files and an optional message. Stored briefly so we can scan and deliver them, then automatically deleted. Lawful basis: performance of the service.
• Your IP address. Used only for security and rate-limiting (stopping floods and abuse). Lawful basis: our legitimate interest in keeping the service safe.
• A silent bot check. Before a transfer can start we run Cloudflare Turnstile, an invisible alternative to a captcha that tells people apart from bots with nothing for you to click and no puzzles or images to solve. To make that judgement Cloudflare processes your IP address, your browser’s user-agent header and TLS fingerprint, and the identifier of our widget, using them to decide whether the request is automated and to improve that detection; Cloudflare undertakes not to use this data for advertising or cross-site tracking, and their handling of it is set out in the Cloudflare Turnstile Privacy Addendum. Lawful basis: our legitimate interest in keeping a free, open transfer tool from being abused.
• Strictly-necessary cookies only.After you confirm your email once, we set a signed cookie so your browser doesn’t have to confirm again on future sends; it carries only your email and an expiry. The bot check described above may set a short-lived cookie of its own while it verifies the request. We use no advertising, analytics, or tracking cookies.

• We never use your files to train AI or machine-learning models — ours or anyone else’s.
• We never sell, rent, or share your data for advertising, and we don’t build a profile of you.
• We never claim ownership of your work. Our rights over your files are limited strictly to delivering your transfer — see our Terms.

Your files, message, and the transfer itself are deleted automatically about four days after upload (enforced by both our app and an automatic storage-deletion rule). We keep a minimal record of the transfer and the sender’s email for up to 12 months, solely for security, abuse-prevention, and to handle any dispute, after which it is deleted. We will only email you beyond delivering your transfers if you have separately and clearly opted in.

We use a small number of trusted providers (sub-processors) strictly to run the service:

• Backblaze — file storage, in the EU (Amsterdam).
• Resend — sending the confirmation and delivery emails.
• ClamAV — automated malware scanning of uploads, run in-house on our EU infrastructure (Amsterdam).
• Cloudflare — the invisible bot check (Turnstile) that guards the send form, described in section 2. Global edge network.
• Railway — application hosting, in the EU (Amsterdam).
• Unsplash — supplies the background photography only. We send Unsplash no personal data and none of your files.

Where a provider is located outside the UK/EEA (for example, our email provider, the bot check), we rely on appropriate safeguards — the UK International Data Transfer Agreement / Addendum or Standard Contractual Clauses.

Your files are stored, scanned, and served entirely within the EU (Amsterdam). The only personal data that leaves the EU is the email address used to send or receive a transfer, handled by our email provider under the safeguards in section 5.

Transfers travel over encrypted connections (TLS), every upload is scanned for malware before it can be downloaded, access to a transfer requires its unguessable link, and everything is short-lived by design. No system is perfectly secure, but short retention and a small data footprint keep exposure low.

You have the right to access, correct, delete, restrict, object to, or port your personal data, and to withdraw any consent. To exercise any of these, email legal@vidualspaces.com. If someone sent you files and you’d rather we didn’t hold your address, tell us and we’ll remove it — it auto-deletes with the transfer in any case. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or your local supervisory authority.

Send isn’t intended for children under 16, and we don’t knowingly collect their data.

If we change how Send handles data, we’ll update this page and its “last updated” date. Material changes will be made clear.