PRIVACY POLICY

Last updated: 27 September 2026

This Privacy Policy explains how Peryon Technologies Limited ("Peryon", "we", "us", or "our") collects, uses, stores and protects information when you use pendrive.zip (the "Service").

pendrive.zip is designed as a privacy-conscious temporary file transfer service. It is not intended to provide permanent file storage or backup.

Files uploaded through the Service are automatically scheduled for deletion after a limited retention period. The standard retention period is generally 10 minutes, although users may in certain circumstances select or receive a longer retention period. Paid plans may provide longer retention periods. In all cases, transfer files remain temporary and are subject to a defined expiration period.

1. WHO OPERATES PENDRIVE.ZIP?

The Service is operated by:

Peryon Technologies Limited

BRN: 77500574

146 Tung Choi Street

Mongkok, KLN

Hong Kong

Email: hello@peryontechnologies.com

For privacy-related questions or requests, you may contact us at the email address above.

2. INFORMATION WE PROCESS

We aim to collect and retain only the information reasonably necessary to operate, secure and improve the Service.

2.1 Uploaded files

When you upload a file, we may temporarily process and store:

the file itself;
its original filename where necessary to provide the Service;
file size;
file type or MIME type;
technical identifiers necessary to associate the file with a transfer room;
upload, download and expiration timestamps; and
other technical metadata required to provide the transfer.

Files may contain personal data or other information depending on what the user chooses to upload.

We do not use the contents of uploaded files for advertising or behavioural profiling.

2.2 Temporary transfer information

When creating or joining a transfer room, we may process:

room identifier;
custom room name or URL identifier;
anonymous session identifier;
creation, activity and expiration timestamps;
authentication and session information; and
technical information necessary to verify access to the room.

PINs are not intended to be stored in plaintext. Where PIN credentials must be retained for verification, they are stored in a cryptographically protected form.

2.3 Registered and paid accounts

Where account registration or paid plans are available, we may process additional information including:

email address;
account identifier;
account creation date;
subscription status;
selected plan;
subscription and billing-related identifiers;
payment status;
account settings;
reserved custom room name, URL or identifier; and
plan entitlements and usage limits.

Paid users may be able to reserve a custom pendrive.zip URL identifier or similar namespace for their account.

We may retain the association between an account and its reserved identifier for as long as necessary to provide that feature, including during an active subscription and for any reasonable grace or recovery period that applies after cancellation.

2.4 Payment information

Payments for paid pendrive.zip plans are processed by Stripe.

Stripe may collect and process information necessary to process payments, including payment-card details, billing information, transaction information and fraud-prevention information.

Complete payment-card details are processed directly by Stripe and are not intended to be stored by Peryon Technologies Limited.

We may receive and retain limited information from Stripe relating to your payment and subscription, such as:

Stripe customer identifier;
subscription identifier;
selected plan;
transaction identifier;
payment status;
subscription status;
billing period;
payment failure information; and
other information reasonably necessary to administer your subscription.

Stripe processes personal data in accordance with its own privacy documentation and applicable data-protection obligations.

2.5 Technical and security information

When you access the Service, we and our infrastructure providers may process technical information including:

IP address;
browser type;
operating system;
device category;
request timestamps;
security and rate-limiting information; and
error and diagnostic information.

This information may be used to operate the Service, prevent abuse, detect attacks, enforce technical limits, troubleshoot errors and maintain security.

2.6 Usage analytics

We may maintain privacy-conscious statistics about Service usage, including:

rooms created;
files uploaded;
downloads;
successful transfers;
file sizes;
broad file categories;
transfer duration;
selected retention periods;
device, browser and operating-system categories;
aggregated bandwidth and storage usage; and
use of particular Service features.

Where reasonably possible, analytics are aggregated or pseudonymised.

We do not use these analytics to build behavioural advertising profiles about individual users.

3. WHY WE PROCESS INFORMATION

We process information as reasonably necessary to:

provide temporary file-transfer functionality;
create and maintain user accounts where applicable;
provide paid subscriptions and premium features;
manage reserved custom URLs or identifiers;
authenticate access to transfer rooms;
upload and deliver files;
apply the retention period selected or provided for a transfer;
automatically expire and delete files;
process and administer subscriptions and payments;
protect the Service against abuse, attacks and unauthorised access;
enforce technical and plan limits;
maintain and troubleshoot the Service;
understand aggregate Service usage;
improve performance, reliability and functionality; and
comply with applicable legal obligations.

Where the General Data Protection Regulation ("GDPR") applies, the applicable legal basis may include:

performance of a contract or taking steps at your request before entering into a contract;
our legitimate interests in operating, securing and improving the Service;
compliance with legal obligations; and
consent where consent is required by applicable law.

4. TEMPORARY FILE STORAGE AND RETENTION

pendrive.zip is a temporary file-transfer service. It is not a permanent cloud-storage or backup service.

For standard transfers, files will generally expire 10 minutes after upload.

Certain features may allow a user to extend this period.

Registered or paid users may have access to longer file-retention periods depending on their plan, account entitlements or selected settings.

The applicable expiration time should be displayed through the Service where appropriate.

Regardless of the selected plan or retention option, uploaded transfer files are subject to a finite retention period. pendrive.zip does not provide indefinite storage of uploaded transfer files unless we expressly introduce and describe such a service separately in the future.

When the applicable retention period expires:

the file becomes unavailable through the normal Service;
access authorisation for the file expires;
the file is scheduled for deletion from active storage; and
associated temporary file records may be deleted.

Deletion from underlying infrastructure may not always occur at the exact instant of expiration due to processing queues, technical failures, backups or infrastructure-provider processes. This does not mean that the file remains available through pendrive.zip.

Users must maintain their own original or backup copies of important files.

5. ACCOUNT RETENTION

Where registered accounts are available, account information may be retained while the account remains active and for a reasonable period afterwards where necessary for:

account recovery;
billing and accounting;
fraud prevention;
dispute resolution;
security;
enforcement of our Terms of Service; and
compliance with legal obligations.

Some records, particularly billing and transaction records, may need to be retained for legally required periods even after an account has been closed.

Account deletion does not necessarily result in immediate deletion of information that we are legally required or otherwise permitted to retain.

6. RETENTION OF ANALYTICS AND SECURITY INFORMATION

Temporary room and transfer information is retained only for as long as reasonably necessary to provide the Service.

Security, fraud-prevention and diagnostic records may be retained for a longer limited period where reasonably necessary to detect abuse, investigate incidents, maintain security or comply with legal obligations.

Aggregated or sufficiently anonymised information that no longer identifies an individual may be retained for longer-term analytics.

We periodically review our retention practices and aim not to retain personal data longer than necessary for the purpose for which it is processed.

7. SERVICE PROVIDERS

We use third-party service providers to operate parts of pendrive.zip.

7.1 Supabase

We use Supabase for backend infrastructure, which may include:

database services;
authentication;
file and object storage;
realtime functionality; and
related backend infrastructure.

Information processed through Supabase may therefore include temporary files, account information, transfer metadata and other information necessary to provide the Service.

7.2 Stripe

We use Stripe as our payment processor for paid subscriptions and other paid features.

Stripe processes payment and billing information necessary to complete transactions, manage subscriptions, prevent fraud and provide payment-related services.

Where Stripe collects information directly from you, Stripe may process that information in accordance with its own privacy policy and applicable legal obligations.

Peryon Technologies Limited does not intend to store complete payment-card numbers, card security codes or equivalent sensitive payment credentials.

We may add or replace service providers as the Service develops. Where required by applicable law, appropriate contractual or other safeguards will be used in relation to providers processing personal data on our behalf.

8. INTERNATIONAL DATA TRANSFERS

Peryon Technologies Limited is established in Hong Kong.

Supabase, Stripe and other infrastructure or technology providers may operate systems or process information in multiple jurisdictions.

As a result, information may be transferred to or processed outside the country in which you are located.

Where applicable law requires specific safeguards for international transfers of personal data, we will implement appropriate safeguards as required.

9. SECURITY

We take reasonable technical and organisational measures designed to protect information against unauthorised access, disclosure, alteration, loss or destruction.

Depending on the relevant component of the Service, these measures may include:

encrypted network connections;
private file storage;
temporary access credentials or signed URLs;
access controls;
server-side authentication;
cryptographically protected PINs;
rate limiting;
limited retention periods;
automated deletion; and
monitoring for suspicious activity.

No internet-based service can guarantee absolute security.

Users should consider the sensitivity of information before transferring it through any online service.

10. YOUR RESPONSIBILITIES WHEN UPLOADING FILES

You should only upload files that you have the right to possess, process and share.

You are responsible for ensuring that your use of the Service, including information contained in uploaded files, complies with applicable law and does not infringe the rights of others.

You should share transfer URLs, PINs and other access credentials only with intended recipients.

If you upload personal, confidential or sensitive information, you are responsible for determining whether pendrive.zip is appropriate for that transfer and whether you have the necessary authority to share that information.

11. YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have rights concerning your personal data, including rights to:

request access to personal data concerning you;
request correction of inaccurate information;
request deletion where applicable;
object to or restrict certain processing;
request data portability where applicable;
withdraw consent where processing is based on consent; and
lodge a complaint with an applicable data-protection authority.

Because anonymous pendrive.zip transfers intentionally require very little identifying information and are retained only temporarily, we may sometimes be unable to associate a particular anonymous transfer or record with a particular person.

We may request reasonable information necessary to verify a privacy request.

Privacy requests may be submitted to:

hello@peryontechnologies.com

12. COOKIES AND SIMILAR TECHNOLOGIES

pendrive.zip may use cookies, local storage or similar technologies that are necessary for functionality such as:

maintaining temporary transfer sessions;
remembering authenticated room access;
maintaining registered-user sessions;
security;
preventing abuse; and
remembering essential preferences.

Further information is provided in our Cookie Policy.

If we introduce non-essential cookies or similar technologies that require consent under applicable law, we will obtain the appropriate consent before using them.

13. CHILDREN

pendrive.zip is a general-purpose file-transfer utility and is not specifically directed at children.

We do not knowingly seek to collect children's personal information for advertising or behavioural profiling purposes.

14. LEGAL REQUIREMENTS AND VALID REQUESTS

We may preserve, disclose or otherwise process information where reasonably necessary to:

comply with applicable law;
comply with a binding request from a competent authority;
respond to valid legal process;
protect the rights, property or safety of Peryon Technologies Limited, our users or others; or
investigate fraud, security incidents or misuse of the Service.

Because transfer files are designed to expire automatically, requested content may already have been permanently deleted by the time we receive such a request.

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy as pendrive.zip develops, including when we introduce new features, subscription plans, payment options or changes to our infrastructure.

The current version will be published on pendrive.zip together with the date on which it was last updated.

Where required by applicable law, material changes will be communicated appropriately.