Privacy
What Elara Send keeps and how to contact us about your information.
Effective 20 October 2026 · Version 1.2
At a glance
We use account information, transfer records and the files you choose to provide file delivery. Share links give their holders access to the delivery. Passwords add a separate access check. We do not use uploaded files to train AI models.
Who is responsible
| Company | Registration and place |
|---|---|
| Elara-Cortex Mathematical Infrastructure for Complex Systems, Inc. | Delaware file number 10676612. New Jersey, United States. |
| Elara-Cortex Mathematical Infrastructure for Complex Systems (Pty) Ltd | CIPC Enterprise Number 2026/492586/07. Johannesburg, South Africa. |
Contact Kgomotso Lekola at kgomotso@elara-cortex.com.
What this app keeps
| Information | Purpose | Retention |
|---|---|---|
| Email, display name and sign in information | Account access and support. A password account stores a password hash. | Kept as part of your account. Contact us to request account closure or deletion. |
| Original files, upload parts and prepared copies | Checking, restoring and delivering your originals. | Until delivery expiry or revocation, then queued for deletion. Interrupted upload sessions end after 24 hours. A file still used by another active delivery remains until that delivery ends. |
| Temporary ZIP archive | One download containing the delivery’s originals and folder paths. | The delivery’s expiry and access checks apply. Queued for deletion when the delivery expires or is revoked. |
| File names, paths, sizes, checksums, messages, expiry, upload state and download starts | Delivery management, integrity checks, support and security. | Transfer records remain after file deletion. Delivery expiry does not automatically delete these records. |
| Email verification and delivery | Your verified account address, recipient addresses, encrypted queued messages, provider delivery status and download notification preferences. | Verification codes expire after ten minutes. Email request records are removed after 30 days in batches. Verified address and notification preferences remain with your account and delivery. |
| Subscription and billing records | Allowances, support and payment reconciliation. | Retained for account support and reconciliation. Contact us about a record or deletion request. |
Deletion is processed in batches. Link expiry or revocation blocks new download authorisation before physical deletion finishes.
Security and free sending limits
For Quick send and Free accounts, we derive a security identifier from the network address to enforce free sending limits and prevent abuse. It changes each UTC day and can cover people sharing a connection. IPv6 addresses within the same network prefix are grouped together. Transfer admission records do not store the raw network address. Daily counters reset at 00:00 UTC. Attempt records expire after two minutes, sending permissions after ten minutes and the daily identifier key at the end of the following UTC day. Expired records are removed in batches when new sending requests are processed, so expiry does not mean immediate physical deletion. Pro and Studio do not use these free network allowances.
Who receives information
| Recipient | Information and purpose |
|---|---|
| Hosting and storage providers | Files and application records needed to operate delivery. |
| Identity provider | Sign in information when you choose its sign in. |
| Payment provider | Checkout and subscription information. Stripe handles card details. |
| Email service | Your address, recipient addresses, message and delivery link when you choose email sharing. Sender notices record a download starting, rather than confirming the whole file was saved. |
| Your recipient | Delivery title, message, file names and original files after the link and password checks. A password protected link can show its title, sender and expiry before it is unlocked. |
We do not sell uploaded files or account information. Social sharing links open the service you choose with your delivery link. No social tracking script is loaded by the sharing tray.
Your choices
Ask for access, correction, deletion or an export, or object to processing, by emailing kgomotso@elara-cortex.com from your account address. You can revoke a delivery from My transfers. Contact us to close your account. You can raise a privacy complaint with the Information Regulator in South Africa or your local privacy authority.
Cookies and payments
This app uses essential sign in cookies and browser storage for your browser identity and upload resumption. It does not load advertising or analytics cookies. See Cookies for each record and its lifetime. Payment happens on Stripe’s checkout page, where Stripe’s privacy policy applies.