Your footage is yours. Here's exactly what we keep.

The files you add (originals), plus the 1080p proxies and poster frames we make from them, are stored in a private Cloudflare R2 bucket. With them we store each project's name, folder structure, file names and sizes, and technical details we read from the files: resolution, frame rate, codec, duration, timecode, recording date, and camera make and model when the file includes them. If you fill in a public profile (name, title, photo, email, links), it's shown as “Uploaded by” on your share pages.

Share links. Anyone with a project's link can watch and download it. Links are long random addresses that can't practically be guessed, but they are not password-protected: share them only with people you trust with the footage.

• Device. When the app first starts it registers with a random device id, the Mac's name, the app version and a one-way hash of the Mac's hardware id (so a reinstall doesn't create a second free allowance). We never receive the hardware id itself.
• Sign in with Google (optional). If you sign in, Google tells us your name, email address and account id. We use them to link your Macs and projects to one account. We don't get access to your Gmail, Drive or anything else.
• Email for alerts (optional). If you add one, we email you when an upload needs you (a failed file, a disconnected drive, your Mac going offline mid-upload) or a shoot is safe to clear.
• API keys. Keys you create for AI agents are stored hashed; we only show a key once.

• Upload status. While uploading, the app sends progress and speed every minute, so we can email you if your Mac disappears mid-upload.
• Upload speed. The Upload speed tab records, once a minute, how fast this Mac is uploading and the names of the apps using the upload (for example “Google Chrome, 2.1 Mbps”), plus the results of connection tests (upload and download speed, ping). These are synced to your account so you can see them over time. They contain app names and speeds, never what those apps send.
• Invitations. When you invite someone, we store their email address, send them one email with the link, and note when they open it.

• Cloudflare: file storage (R2) and DNS.
• Vercel: hosting for uploadfilm.com and its API.
• Neon: our database (accounts, devices, projects, keys, speed history).
• Upstash: short-lived counters that rate-limit the API.
• SmashSend: sending email.
• Google: sign-in, if you use it.

They process data only to provide their service to us. Data may be stored and processed in the United States.

Your footage stays until you delete it; we never delete it to make room. Removing a project in the app removes it from that Mac only: the files and link stay online. To delete a project or your whole account from our servers, email privacy@uploadfilm.com from your account's address (or include the project's link) and we'll delete it within 30 days, including the files, proxies and share link. Speed history and upload status are kept while your account is active and deleted with it.

You can ask us for a copy of your data, to correct it, or to delete it, wherever you live. Write to privacy@uploadfilm.com. If you're in the EU or UK you can also complain to your data protection authority.

If this page changes in a way that matters, we'll update the date above and tell signed-in users by email.