Privacy Policy

Some information is needed to run put.io, and some helps us fix problems, improve the service and help you out. We don't collect data for the sake of having it. You won't find the Meta Pixel or Google Analytics here, and we never sell your files or your personal data. Here's what we collect, why, and what control you have over it.

Your files are your business. We don't claim any ownership of them.

This policy covers people who visit or use put.io, people who contact us and anyone who opens a shared link, even without an account.

1. What we collect

You need a username and email address to create an account. We also keep your password, stored securely, along with your sign-up date, account settings and plan details.

We keep a record of each payment, including when it was made and how much it was. Through our payment providers, we can also see purchase, renewal, cancellation, refund and invoice details. Your invoices come from your payment provider, which keeps them.

We store the files you upload or ask us to download, along with information about them and your transfer history. We also keep your sharing settings and your friend and family-plan connections. When someone opens a link you've shared, we record their IP address.

When you use put.io, we collect your IP address, account and device identifiers, browser and app details, and error and performance reports. Our analytics tools also record page visits and feature use. Our Services we use page lists each tool and what it receives.

We keep the support conversations, feedback and reports you send us, and any requests you make about your personal data.

2. How we use your information

We use your information to run your account, download and store your files, handle payments and help you when you need support. These uses are necessary to fulfil our contract with you.

We also use information to fix problems, keep put.io secure, improve it, understand how it's used, respond to questions and feedback, prevent and investigate abuse, and handle legal claims. These are our legitimate interests, and we carefully weigh them against your privacy and rights.

For uses that need your permission, we ask first. You can withdraw it at any time, though that doesn't change how we used your information before you withdrew it.

Some information is needed to handle requests you make about your personal data and to meet our obligations under data protection law.

Our team can only access the information they need for these purposes.

3. Your files and transfers

When you ask put.io to download a file, our servers connect to the source for you. The source sees our server's IP address, not yours.

There's no public catalogue, and other members can't browse your storage. Files are shared only through your sharing settings or a temporary share link you create. The Terms explain how sharing works.

Everyone on a family plan has their own account. The plan owner can see how much storage you use, but can't see your files unless you share them. You can see the owner's username and your own storage use.

People on the same family plan are automatically added as each other's friends. If you share something with all your friends, anyone who becomes your friend later can see it too, including new family-plan members. Otherwise, being on the same plan doesn't give anyone access to your files.

If you use Trash, deleted files stay there until the date shown, then they're gone.

You can clear your transfer history and other activity records in the Clear data section of your account. Some diagnostic, security and support records may remain, as explained in section 6.

4. Who else receives information

We don’t run every part of put.io on our own. Depending on how you use it, information may go to:

• providers that run our infrastructure, storage and delivery, or help with support, messages, security, diagnostics and analytics;
• services built into specific features, listed on our Services we use page;
• the payment provider handling your purchase, for billing, refunds and related obligations;
• third-party apps and tools you connect to your account;
• authorities, as described in section 5;
• legal advisers, when we need them to handle legal claims.

Payment providers keep purchase records under their own privacy policies. Team members with permission can look up transaction details in a provider's system to help with billing, access or refunds. They can't see your full card details, only the last four digits and the expiry date.

5. Legal requests and safety

We don't share your information with authorities on our own initiative, with two exceptions. If we become aware of child sexual abuse material (CSAM) on put.io, we report it and cooperate fully with the authorities. We also help with investigations into ransomware attacks.

Otherwise, we only share information with authorities when Turkish law requires it. Someone asking, or filing a complaint, isn't enough to get your identity or files. We look at every request carefully before responding.

6. How long we keep information

When your plan ends, we keep your files for about two weeks before deleting them. Your account details and settings stay, so you can pick up where you left off if you come back.

While your put.io account exists, even if you’re not on a paid plan, we keep page-visit and sign-up records linked to it, along with other analytics, diagnostic and technical records, unless they’re deleted sooner. Events recorded by our product analytics and feature-management service are kept for up to 13 months, or until you destroy your account, whichever comes first.

We also keep your support history, including your support profile, conversations and related activity, so we have the context if you have another question later. If you don’t have an account, we delete your support conversations after two years of inactivity, unless we still need them to understand a problem we investigated or a change we made.

When you destroy your account, we delete it along with your files, settings, account details and payment records. This can't be undone. We keep a limited record of the deletion date and your user ID or username, so we can confirm what happened if you contact us later.

We also delete the analytics, diagnostic and technical records linked to your account, and ask the external services we use to delete theirs. For your support history, we automatically ask our support provider to delete your profile and conversations seven days after you destroy your account.

Your payment provider keeps its own transaction records, and destroying your put.io account doesn't delete them.

When a shared link expires, we delete the IP addresses recorded for it.

Deletion from our servers and backup storage may take some time to complete.

7. Cookies, analytics and messages

We use cookies and similar technologies to keep you signed in, protect your account and make support chat work. Some of the tools on our Services we use page also set their own cookies.

Keeping put.io running smoothly

We use error and performance reports to find and fix problems, sometimes before you notice anything is wrong. They show us what’s causing crashes, slowdowns or playback problems in our apps. Playback-failure reports aren’t linked to your account.

Improving put.io

Usage information shows us which apps, versions, devices and features people use, and how subscriptions change over time. That helps us decide what to improve and where people may need help. Optional product analytics stays off unless you turn it on. On our website, you can accept or reject it in the cookie banner and change your choice later through Cookie settings. In our apps, you can turn it on or off in Settings.

Things we choose not to collect

We use analytics to understand how put.io is used, but there are things we deliberately leave out:

• We don’t include file names, media titles, links, search text or anything you type in our product analytics.
• We don’t record sessions or replay your screen.
• We don’t use heatmaps or track your mouse movements and scrolling in our analytics.

We also don’t use advertising networks, ad-targeting tools, Google Analytics, Google Tag Manager or the Meta Pixel.

Helping you

We use your account and plan details, technical information and previous conversations to understand what’s going wrong and help you sort it out. We may also reach out when your account activity suggests you could use a hand.

Messages from us

We try to email you only when it’s worth it. Most of our messages are about your account, security or getting you help, and your account and subscription activity help us decide when to get in touch. You can unsubscribe from optional emails, though essential account and security notices may still reach you.

8. Where information is processed

Our providers work in different countries, so your information may be processed outside the country where you live. Our Services we use page explains where it’s processed and how it’s protected.

9. Your rights

Depending on the law that applies, you may be able to:

• access, correct or delete your personal data;
• get a copy of it and take it to another provider;
• restrict or object to how we use it;
• withdraw any permission you’ve given us;
• complain to a data protection authority.

If the GDPR applies, that authority can be in the country where you normally live or work, or where you think your rights were violated.

You can change your account details or destroy your account on the Account page. Section 6 explains what we keep after you destroy it.

For anything you can’t do yourself, such as getting a copy of your personal data or of the safeguards we use for international transfers, email support@put.io.

10. Security and changes

We protect personal data with safeguards built into our systems and the way we work.

If a data breach affects your personal data, we’ll let you and the authorities know when the law requires it.

We may update this policy as put.io changes. When we do, we’ll publish the new version with its date, and let you know about significant changes.

11. Contact and representatives

put.io is run by PUTIO İnternet Hizmetleri A.Ş., which is responsible for the personal data covered by this policy. Our KVKK notice, in Turkish, covers the same information in the form Turkish law requires.

PUTIO İnternet Hizmetleri A.Ş.
Halaskargazi Cad. 38-66/215, 34371, Sisli, Istanbul, Turkey
support@put.io