Back to Home

Privacy Policy

Last updated: May 22, 2026

1. Introduction

ExaStash ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our file hosting platform.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, name, password
  • Payment Information: Bank details, UPI ID (for payouts)
  • Content: Files you upload to the platform
  • Communications: Messages you send to support

2.2 Information Collected Automatically

  • Device Information: IP address, browser type, operating system
  • Usage Data: Pages visited, features used, time spent
  • Cookies: Session cookies for authentication

2.3 Information from Third Parties

  • OAuth Providers: If you sign in with Google, we receive your email and name
  • Payment Processors: Transaction status from Razorpay

3. How We Use Your Information

We use collected information to:

  • Provide and maintain the Service
  • Process payments and payouts
  • Calculate and distribute creator earnings
  • Detect and prevent fraud
  • Send transactional emails (account verification, payout notifications)
  • Improve our Service based on usage patterns
  • Comply with legal obligations

4. Fraud Prevention

To protect the integrity of our platform, we collect and analyze:

  • IP addresses (hashed for privacy)
  • Browser fingerprints (for device identification)
  • View patterns and durations
  • Geographic location (country level)

This information helps us detect fake views, bot traffic, and other fraudulent activities.

5. Data Sharing

We do not sell your personal information. We may share data with:

  • Service Providers: Cloud hosting (Cloudflare), payment processing (Razorpay)
  • Legal Authorities: When required by law or to protect our rights
  • Business Transfers: In connection with a merger or acquisition

6. Data Retention

  • Account Data: Retained while your account is active
  • Uploaded Files: Deleted within 30 days of account deletion
  • View Logs: Aggregated after 90 days, deleted after 1 year
  • Payment Records: Retained for 7 years (tax compliance)

7. Data Security

We implement security measures including:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest for sensitive data
  • Regular security audits
  • Access controls and authentication

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate information
  • Erasure: Request deletion of your data
  • Portability: Receive your data in a portable format
  • Objection: Object to certain processing activities

To exercise these rights, contact us at [email protected].

9. Cookies

We use the following types of cookies:

  • Essential: Required for authentication and security
  • Functional: Remember your preferences
  • Analytics: Understand how users interact with the Service

You can control cookies through your browser settings, but some features may not work properly without them.

10. International Transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place for international data transfers.

11. Children's Privacy

Our Service is not intended for users under 13 years of age. We do not knowingly collect information from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last Updated" date at the top indicates the latest revision.

13. Contact Us

For privacy-related inquiries, contact us at:

If you have questions about this policy, please contact us at [email protected]