1. Who is responsible for your information
WEBTEK COMMERCE LTD is the controller of the personal information we process for FTPSYNC and ftpsync.io. We are registered in England and Wales, company number 16175926, with our registered office at 83 Trinity Road, Edwinstowe, Mansfield, England, NG21 9RW.
Contact support@ftpsync.io about privacy, your information or this policy. You can also write to our registered office or visit the contact page.
This policy covers the information relevant to FTPSYNC's website, software and connected services. Payment checkout is still being connected; descriptions of payment processing explain its intended operation when available, not a claim that it is live now.
2. Information we process and where it comes from
- Account information: your email address, customer or account identifiers and information you provide when managing or contacting us about your account.
- Purchase information: order and transaction references, purchased plan, payment and refund status, and renewal information. Payment providers handle payment credentials; do not send us card details.
- Software licensing information: licence identifiers and status, device and session identifiers, and activation, validation and revocation records needed to manage software access.
- Authorised access information: linked purchase references and build or content-access metadata used to verify which downloads and mirrors your account may access.
- Technical and security information: IP addresses, request metadata, security events and error logs used to operate and protect the website and connected services and investigate problems.
- Support correspondence: emails, requests and any screenshots, diagnostic files or other information you choose to send us.
Information comes from you, your use of the website or software, payment and licensing providers, and a linked purchase portal where needed to verify your existing purchase rights. Do not send passwords, licence keys, access tokens or sensitive payment credentials in support messages.
3. Why we use information and our lawful bases
- Contract: to create and manage your account, provide software licensing, handle purchases and refunds, verify authorised access and provide support required to deliver the service you request.
- Legal obligations: to keep required payment and tax records and meet other applicable legal duties.
- Legitimate interests: proportionate fraud prevention, account and service security, troubleshooting and operational reliability, balancing these needs against your rights and reasonable expectations.
- Consent: where required for optional marketing or non-essential cookies and similar technologies. You may withdraw consent without affecting the lawfulness of processing before withdrawal.
We use information for the relevant purpose and limit it to what is needed. If a new purpose requires a different lawful basis or consent, we will address that before processing for that purpose.
4. Downloads, local transfer data and saved sessions
Content downloads travel from the relevant content sources or FTP mirrors to your device. Those source operators may see your IP address, requests and file metadata, and may process transfer information under their own terms and privacy policies. This policy does not promise that source operators cannot access files or transfer data.
The app's local transfer and checkpoint data is separate from support information you voluntarily send us. Local state is used to manage transfers on your device; if you send logs or diagnostic files to support, the information in those files becomes part of that support request. Review them for sensitive information before sending.
A saved device session persists until revoked. A saved session is not a permanent grant of access: current software-licence and content-rights checks continue independently. This policy does not make unaudited promises that all use is anonymous, that no logs or analytics exist, or that particular encryption protections apply to every transfer.
5. Who receives information
We share relevant information only as needed for the service, applicable legal duties or the purposes described above. Providers and recipients may include:
- Paddle, merchant of record for Paddle purchases, which processes buyer and transaction information in its own independent merchant and privacy role.
- Revolut, the payment provider for Revolut Pay purchases where WEBTEK COMMERCE LTD is the merchant.
- Keygen, for software licence, device, activation and revocation management.
- Hosting, email and support-service providers needed to operate the website, communicate with you and resolve requests.
- Linked purchase portals and authorised content-source operators where necessary to verify rights and provide the downloads you request.
- GitHub, for public installer downloads when a release is available; GitHub may keep its own request and download logs under its privacy terms.
Not all providers act solely as our processors; some process information independently under their own legal obligations and privacy policies. We may also disclose information to authorities where legally required, or where necessary and lawful to protect rights or address fraud. We do not sell personal data.
6. International processing and security
Providers may process information outside the United Kingdom or your country of residence. Where transfer rules apply, we use applicable adequacy arrangements or appropriate safeguards required by law. Contact support@ftpsync.io for information about safeguards relevant to your data.
We use proportionate access controls and security measures to protect personal information. No service or transfer method can be guaranteed completely secure. Keep your credentials and tokens private and contact us if you suspect misuse. We do not make specific encryption or provider-location guarantees that have not been verified.
7. How long information is kept
Retention depends on the purpose, account status, legal obligations and whether information is needed to resolve a dispute or protect the service:
- Account and licensing records are kept while active and for as long as necessary afterwards for relevant disputes, legal duties or legitimate operational needs.
- Payment and tax records are kept for the period required by applicable law.
- Security, request and error logs are kept only for the operational, troubleshooting or security period necessary for their purpose.
- Support records are kept to resolve the request and for necessary follow-up, disputes or legal obligations.
Information no longer needed is deleted or anonymised as appropriate. We do not promise an unverified automatic deletion timetable. Contact us for information about retention applicable to your records.
8. Cookies and similar storage
Necessary session, security and payment-related cookies or storage may be used to keep you signed in, protect the service and complete transactions. Payment providers may use their own necessary storage during checkout.
Non-essential cookies or similar technologies, including optional analytics or advertising storage, require your consent before use where required by law. You can withdraw optional consent and manage storage through available consent controls or your browser settings; blocking necessary storage may prevent parts of the service from working.
This policy is not an audit guarantee that the website or third-party services currently contain no analytics, cookies or logs. For questions about the technologies applicable to your visit, contact us.
9. Your rights and complaints
Subject to applicable law and relevant exceptions, you may request:
- Access to your personal information and correction of inaccurate or incomplete information.
- Erasure or restriction of processing where the legal conditions are met.
- Portability of eligible information provided under consent or contract.
- Objection to processing based on legitimate interests, and objection to direct marketing.
- Withdrawal of consent for optional processing at any time.
Email support@ftpsync.io to exercise a right. We may need proportionate information to verify your identity, but never ask you to email passwords, access tokens or full card details. Some records may need to be retained to meet legal obligations or defend claims.
You may complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint, or to your local supervisory authority where applicable. You can contact us first, but this does not limit your right to complain.
10. Adults and policy changes
FTPSYNC is intended for adults and is not knowingly directed at children. If you believe a child has provided personal information, contact us so we can assess and take appropriate action.
We may update this policy as services or legal requirements change. The updated date appears above; material changes will be brought to your attention through an appropriate website notice or direct communication where required. Read our Terms of Service and Refund Policy for the related product and purchase terms.