Privacy Policy

1. Overview & Commitment

FLIQAINDIA PRIVATE LIMITED ("Company", "we", "our", or "us") operates the Fliqa Sharing digital platform (https://sharing.fliqaindia.com). We are deeply committed to protecting the privacy, confidentiality, and security of our users and their recipients.

This Privacy Policy explains what data we collect, how it is processed and stored in our cloud infrastructure, and the rights you retain over your information in accordance with the Information Technology Act, 2000, and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Information We Collect

• Account Information: When you register an account, we collect your name, email address, password hash (encrypted using bcrypt), and optional avatar. If you authenticate with Google OAuth, we receive your Google name, email, and public profile identifier.
• Uploaded Media & Metadata: When you upload files, we store your file contents, filenames, sizes, MIME types, and folder hierarchies. We also generate temporary WebP preview thumbnails for high-resolution images and videos.
• Billing & Transaction Information: When upgrading to a paid tier, we record the transaction amount, tax breakdown, billing interval, and Razorpay Order/Payment ID. We never collect, process, or store your credit/debit card numbers, CVV, or UPI PINs. All payment instruments are handled directly by Razorpay Software Private Limited.
• Activity & Operational Logs: We record security audit events (such as logins, password updates, link creation, and permission modifications) and aggregate recipient link view counts without collecting detailed recipient tracking profiles.

3. How We Store and Protect Your Data

Your files and personal data are safeguarded with strict modern cloud security controls:

• Private Object Storage: File assets are stored in private Cloudflare R2 storage buckets. No bucket is public; all downloads and previews require time-limited, signed URLs authenticated by our servers.
• Encryption: Data in transit is encrypted using modern TLS 1.3 / HTTPS. Object data is stored with industry-standard server-side encryption at rest (AES-256).
• Session Protection: User sessions are stored in httpOnly, secure, same-site cookies to safeguard against cross-site scripting (XSS) and cross-site request forgery (CSRF).
• Access Control: Share links utilize unguessable 64-character tokens and can be protected with custom passwords, expiration dates, and immediate revocation.

4. Third-Party Infrastructure & Sub-Processors

We rely only on verified enterprise cloud infrastructure providers to deliver our digital service:

We do not sell, rent, monetize, or trade your personal information or uploaded files to any third party or advertising broker.

5. Data Retention & Deletion Rights

Trash & File Purge: When you delete a file or folder in your dashboard, it moves to Trash where it remains recoverable for your plan's retention window. Once the window lapses (or if you click "Delete forever"), the underlying storage objects and version history are permanently erased from Cloudflare R2 and database records.

Account Deletion: You have the right to request full account and data deletion at any time. For detailed steps, visit our Data Deletion page or email us at support@fliqaindia.com.

6. Grievance Officer & Inquiries

In accordance with the Information Technology Act 2000 and rules made thereunder, any privacy grievances or requests to exercise data rights may be addressed to: