UploadWizard

Privacy Policy

Last updated: May 24, 2026

UploadWizard ("we", "us") provides a white-label file-intake platform that businesses ("customers") use to collect files from their own clients. This policy explains what we collect and how we handle it. It is provided for transparency and is not legal advice.

Our role

For files uploaded through a customer's portal, the customer is the data controller and UploadWizard is a data processor acting on their behalf. Uploaded files are stored in the customer's own object storage (e.g. their S3, Azure, or Google Cloud bucket) — we do not retain copies of customer files on our systems.

Information we collect

  • Account & tenant data: business names, domains, administrator email addresses, and configuration you provide.
  • Authentication data: email addresses used for passwordless sign-in, and short-lived one-time codes/links (stored hashed).
  • File metadata: file names, sizes, types, timestamps, and the uploader's email — used to display and manage uploads. File contents live in the customer's storage, not ours.
  • Operational logs: audit events and technical logs needed to run and secure the service.

How we use information

To operate the service: authenticating users, routing uploads to the correct storage, enforcing limits and security controls, providing support, and meeting legal obligations. We do not sell personal information.

Credentials & security

Customer-supplied credentials (database and storage keys) are encrypted at rest. Access is over HTTPS. We apply least-privilege practices and maintain audit logs. No system is perfectly secure, but we work to protect your data.

Sub-processors

We use infrastructure and email-delivery providers to run the service. Uploaded file contents are processed only by the customer's chosen storage provider.

Retention

Customers control how long uploaded files are kept via per-business retention settings. Account and metadata are retained while an account is active and for a reasonable period afterward as required for legal and operational purposes.

Your choices

If you are an end user uploading to a business's portal, please direct privacy requests to that business (the data controller). For data we hold as a controller (e.g. customer accounts), contact us below.

Contact

Questions about this policy: uploadwizard@all7s.us.