Effective Date: October 9, 2025
Data Controller: FileLu, LLC, United States
If you have any questions or concerns, contact our Data Protection Officer (DPO) at [email protected].
Lawful Bases for Processing: We process personal data under the following lawful bases, as required by Article 6 of the GDPR:
- Contractual necessity – to provide our services and maintain your account.
- Consent – for optional features, analytics, cookies, and marketing.
- Legal obligation – to comply with tax, billing, and regulatory requirements.
- Legitimate interest – for fraud prevention, service improvement, and security.
Legal basis for data processing:
Your privacy is important to us. It is FileLu's policy to respect your privacy regarding any information we may collect from you across our website, https://filelu.com, https://file.lu, and other sites or subdomains we own and operate.
We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used.
We collect the minimum necessary amount of information. We don’t buy or sell lists of information. We don’t unnecessarily share your personal information.
We only retain collected information for as long as necessary to provide you with your requested service. What data we store, we’ll protect within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use or modification.
We require a prior user's consent before starting any data processing on FileLu.
We don’t share any personally identifying information publicly or with third-parties, except when required to by law.
Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.
You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services.
Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. If you have any questions about how we handle user data and personal information, feel free to contact us.
HOW IS INFORMATION COLLECTED?
When you give us permission to obtain it. When you sign up for or use our products, you voluntarily give us certain information. This can include your name, profile photo, tags, comments, likes, email address you used to sign up, and any other information you provide us. If you’re using FileLu on your mobile device, you can also choose to provide us with location data.
- You also may give us permission to access your information in other services – for example, you may link your Apple, Google, Facebook, or Twitter account to FileLu, which allows us to obtain information from those accounts (e.g., your email). The information we obtain from those services often depends on your settings or their privacy policies, so be sure to check what those are.
We collect technical information when you use our products. We collect such information automatically to help analyze behavior, improve performance, and maintain our platform securely:
- Log Data – includes IP address, pages visited, browser type, date/time, and activity logs.
- Cookies – we use “session” and “persistent” cookies for login, preferences, and analytics. You may manage or withdraw cookie consent anytime via your browser settings or our cookie banner.
- Device Information – such as device type, operating system, and app crash data, depending on your device settings.
HOW DO WE USE INFORMATION WE COLLECT?
Personally Identifiable Information (PII) is used to provide services, maintain your account, enable uploads, and support your user experience. Information may appear in your user profile depending on your chosen privacy settings.
We may use your information for:
- Operating and improving our services
- Processing payments
- Detecting and preventing fraud or abuse
- Communicating with you regarding your account or service updates
We will not release your personal information without your consent, except as required by law or to enforce our Terms of Service.
Google Advertising Cookies
Third party vendors, including Google, use cookies to serve ads based on a user's prior visits to websites. Users may opt out of personalized advertising by visiting Ads Settings or www.aboutads.info.
Opting Out of Cookies and Tracking
You can control and manage cookies directly in your browser. You may also choose to opt out of personalized advertising and analytics as follows:
- Google Ads Personalization:
You can opt out of personalized advertising by visiting
Google Ads Settings or
AboutAds.info.
- Google Analytics:
You can prevent Google Analytics from collecting data about you by installing the
Google Analytics Opt-Out Browser Add-on.
- General Cookie Management:
You can delete or block cookies in your browser settings. Please note that disabling cookies may affect website functionality.
GDPR COMPLIANCE
FileLu takes your privacy seriously. We follow the General Data Protection Regulation (GDPR) for all users in the European Economic Area (EEA). We process the minimum data required to provide our services and we do not sell or rent personal information.
You can delete your account and all your data anytime from My Account.
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of Access – to know what data we hold about you.
- Right to Rectification – to correct inaccurate or incomplete data.
- Right to Erasure – to request deletion of your data (“Right to be Forgotten”).
- Right to Restrict Processing – to limit how we use your data.
- Right to Data Portability – to obtain and reuse your data in another service.
- Right to Object – to processing based on legitimate interest or direct marketing.
- Right to Withdraw Consent – to stop processing where consent was previously given.
To exercise any of these rights, please contact [email protected].
Data Transfer Safeguards
When transferring data outside the EEA, FileLu uses approved mechanisms such as Standard Contractual Clauses (SCCs) to ensure adequate protection. Our primary data centers are located in the United States, Germany, and Finland.
Our Policy Concerning Children
FileLu’s Websites and Services are not intended for individuals under 16. If we learn that a child under 16 has provided personal data, we will promptly delete the account. Parents or guardians may contact us to assist with account deletion.
International Information Transfers
FileLu is a United States company. We may transfer and store your information in the United States, Germany, or Finland, using secure and lawful safeguards as outlined above.
Law Enforcement and Legal Requests
We may disclose information as required by law, regulation, or court order, or when necessary to protect FileLu’s rights, users, or property. We may also share data to prevent fraud, investigate security incidents, or ensure compliance with applicable laws.
CCPA COMPLIANCE
This section applies to California residents under the California Consumer Privacy Act (CCPA). FileLu provides all users with the same level of protection, regardless of location.
- Right to Know what personal data is collected and shared.
- Right to Delete your personal data.
- Right to Non-Discrimination when exercising your privacy rights.
IMPORTANT THINGS TO KEEP IN MIND
Your Consent: By using this site you consent to the collection and use of information as described in this Privacy Policy.
Revoke Consent: You may revoke consent by deleting your account and all stored data via My Account.
Policy Updates: We may update this Privacy Policy periodically. Material changes will be posted on our website.
Contact Us: For questions, concerns, or requests related to your privacy, contact us at FileLu Support or email [email protected].