1. Introduction
Welcome to TransferChat.ai ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our file transfer management service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Name (first and last)
- Password (encrypted and never stored in plain text)
2.2 Connection Credentials
To provide our file transfer services, we securely store:
- S3 bucket credentials (access keys, region, bucket names)
- FTP server credentials (hostnames, usernames, passwords, ports)
- Connection names and configurations
All credentials are encrypted at rest and in transit using industry-standard encryption.
2.3 Usage Data
We automatically collect:
- File transfer activity logs (operation type, timestamps, success/failure status)
- API usage statistics
- Subscription and billing information
2.4 Payment Information
Payment processing is handled by Stripe. We do not store your full credit card numbers. We receive limited payment information from Stripe such as:
- Last 4 digits of card
- Card brand
- Billing status
3. How We Use Your Information
We use your information to:
- Provide and maintain our file transfer services
- Authenticate your API requests and GPT actions
- Process your file transfer operations
- Send you service-related emails (subscription updates, transfer limit notifications)
- Process payments and manage subscriptions
- Improve our services and develop new features
- Comply with legal obligations
4. AI Assistant Integration (MCP & OpenAI)
When you use TransferChat through AI assistants like ChatGPT or Claude via our Model Context Protocol (MCP) server:
- You authenticate via OAuth 2.0 to grant the AI assistant access to your TransferChat account
- The AI assistant can only perform actions you've explicitly authorized (read connections, manage files, etc.)
- Your storage credentials (S3, FTP, SFTP) are never shared with the AI assistant or OpenAI/Anthropic
- File transfers are executed directly between our servers and your storage destinations
- We log the source of operations (e.g., "chatgpt", "claude") for audit purposes
- The AI assistant may process your conversation according to their own privacy policy (OpenAI, Anthropic, etc.)
- You can revoke AI assistant access at any time from your account settings
Our MCP server communicates with AI assistants using Server-Sent Events (SSE) and follows the Model Context Protocol specification. No file content passes through the AI assistant—only commands and metadata.
5. Data Security
We implement appropriate security measures including:
- Encryption of sensitive data at rest and in transit (TLS/SSL)
- Secure password hashing (bcrypt)
- API token authentication with rate limiting
- Regular security audits and updates
- Access controls and monitoring
6. Data Retention
We retain your data as follows:
- Account information: Until you delete your account
- Connection credentials: Until you remove the connection
- Activity logs: 90 days for operational purposes
- Billing records: As required by law (typically 7 years)
7. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data from your profile settings
- Delete your account and associated data (self-service from your profile settings)
- Export your data
- Opt-out of marketing communications
Most rights can be exercised directly from your account settings. For data export requests or other privacy inquiries, contact us at privacy@transferchat.ai or legal@syntaxia.com
8. Third-Party Services
We use the following third-party services:
- Stripe: Payment processing
- DigitalOcean: Hosting infrastructure
- Amazon S3: File storage (when you configure S3 connections)
Each service has its own privacy policy governing their data practices.
9. Cookies and Tracking
We use essential cookies for:
- Session management and authentication
- Security and fraud prevention
We do not use third-party advertising cookies.
10. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this privacy policy periodically. We will notify you of significant changes via email or through our service.
12. Contact Us
For questions about this privacy policy or our data practices:
Company Information:
TransferChat.ai is a product of Syntaxia, operating under Nomad Engineers LLC, a Delaware company.
Operating offices: Atlanta, GA, USA