Privacy Policy

Last updated: October 5, 2026

This policy explains what MY IT SOLUTION LLC ("we", "us") collects when you use SecureDocs at securedocs.myitga.com (the "Service"), why, and what happens to it. We collect only what the Service needs to work.

1. Information we collect

From account holders (Senders)

Account details: first and last name, email address, password (stored as a salted hash, never in plain form), and optionally company name, phone number and address.
Billing status: your plan, subscription status and renewal date, and the identifiers Stripe assigns to your customer record and subscription. Payment is handled by Stripe (see section 4); we never receive or store your full card number, expiry date or security code. To enforce our one-free-trial-per-card rule we store the card fingerprint that Stripe provides, an opaque token that identifies a card without revealing its number.
Files and links: the files you upload, their names and sizes, and the Recipient email address you enter for each link.

From Recipients

The email address the Sender entered for you, which we use only to send the one-time codes for that link.
No account is created for Recipients and no password is collected.

Automatically

Activity records for each link: when it was created, sent, viewed, when a code was requested or entered, when the file was downloaded, revoked or deleted, together with the IP address and browser type of the request. Senders can see this history for their own links. These records exist so that Senders can verify delivery and so that we can detect abuse.
Server logs kept for a limited time for security and troubleshooting.

2. How we use information

To provide the Service: store and deliver files, send one-time codes and link notices, show you your links and their history.
To bill self-service accounts and to prevent abuse of the free trial.
To protect the Service: rate limiting, blocking brute-force attempts, investigating misuse.
To communicate with you about your account, such as password resets and billing notices. We do not send marketing email.

We do not sell personal information, and we do not use your files or messages for advertising, profiling or training of any kind.

3. Your files

Every file is encrypted before it is written to disk (AES-256 with a separate random key per file, authenticated so that a modified file is refused) and decrypted only while it streams to the Recipient who entered a valid code.
Files are deleted automatically when the link expires (7 days after it was created), when the Sender revokes the link, or when the account is closed. Deletion is permanent; we keep no copies or backups of file contents.
We do not open, scan or read the files you upload.

4. Service providers

We share information only with the providers needed to run the Service, and only what each one needs:

Stripe, Inc. processes payments and stores your payment method. Your name, email address and the plan you chose are shared with Stripe when you subscribe. Stripe's handling of your data is described in its own privacy policy at stripe.com/privacy.
IONOS delivers our email (one-time codes, link notices, password resets). The recipient address and the content of each message pass through its mail servers.
Our servers are located in the United States. If you use the Service from outside the United States, your information is transferred to and processed there.

We may also disclose information when the law requires it, to protect the rights or safety of our users, or as part of a sale or merger of our business, in which case this policy continues to apply to the information.

5. Cookies

The Service uses only the cookies it needs to work: a sign-in cookie that keeps you logged in, and a security cookie that protects forms against forgery. Recipients opening a link receive only the security cookie. We use no analytics, advertising or third-party tracking cookies, and we load no scripts or fonts from third-party servers.

6. Retention

Files: until the link expires or is revoked (at most 7 days).
Link records and activity history: for as long as your account exists, so that you can review what happened to each link.
Account and billing records: for as long as your account exists, and afterwards as long as needed for tax, accounting and legal purposes.
Server logs: a limited period, typically no more than 90 days.

7. Your choices and rights

You can view and update your contact details and change your password in the Service at any time.
You can revoke any link, which deletes the file immediately.
You can ask us to provide, correct or delete the personal information we hold about you, or to close your account. We respond within 30 days. Some information may be kept where the law requires it.
If you are a Recipient and no longer want to receive codes for a link, do not request them; the Sender can also revoke the link. Contact us if you receive links you did not expect.
Depending on where you live (for example California or the European Union), you may have additional rights under local law. Contact us to exercise them.

8. Security

Connections use HTTPS only. Files are encrypted at rest as described above. One-time codes are stored as keyed hashes, expire after a few minutes, work once, and are invalidated after repeated wrong attempts. Access to the servers is restricted to MY IT SOLUTION staff who need it. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we take the protection of your data seriously.

9. Children

The Service is not directed to children under 18, and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we will remove it.

10. Changes to this policy

We may update this policy. The "Last updated" date shows the current version; for material changes we will notify account holders by email or with a notice in the Service.

11. Contact

MY IT SOLUTION LLC, Georgia, USA · through the contact page at www.myitga.com