Privacy Notice
Last updated September 2026.
1. Controller
Panda Group is the controller of personal data processed through FLODROP. Contact us through the Contact page for privacy questions or requests.
2. Data we collect
We process account details such as email and display name; uploaded files and link settings; support messages; payment subscription status; and technical data including IP address, device identifiers, usage events and security logs.
3. Why we use data
We use data to perform our contract and provide file transfers, accounts and paid features; to meet legal obligations; and for legitimate interests in security, fraud prevention, support and service improvement. We request consent where required.
4. Recipients
Data may be shared with hosting, storage, authentication, analytics and support providers; Paddle as Merchant of Record for sales, subscriptions, payments, tax and invoices; professional advisers; and authorities where required by law. We do not sell personal data.
5. Security and link passwords
We use access controls, private storage and short-lived signed file links. Link passwords are stored as salted hashes rather than plain text. No online service can guarantee absolute security.
6. Retention
Files and metadata are removed after expiry or deletion, subject to limited backups and legal retention. Account, billing and security records are kept only as long as necessary, then deleted or anonymised.
7. International transfers
Where data leaves the EEA, we use safeguards such as adequacy decisions or approved standard contractual clauses where required.
8. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing; withdraw consent; and complain to a supervisory authority. We normally respond within one month.
9. Cookies
FLODROP uses essential storage for sessions, security and language preferences. Analytics or marketing cookies are used only where permitted and, when required, after consent.