Privacy Policy

1. Scope and Architecture

FilePilot is engineered as a self-hosted, privacy-first file processing platform. When you upload files to FilePilot, they are processed entirely on the host server infrastructure using isolated local engine binaries (such as FFmpeg, ImageMagick, LibreOffice, and Tesseract). We do not send your files or metadata to third-party cloud providers, advertising networks, or analytics services.

2. Ephemeral Storage Lifecycle

To prevent persistent storage risks, FilePilot enforces strict time-based automated deletion policies:

• Completed Output Files: Automatically and permanently removed 4 hours after job completion.
• Incomplete / Abandoned Uploads: Chunked upload sessions not completed within 1 hour are pruned.
• Failed or Cancelled Jobs: Ephemeral working directories and logs are purged after 30 minutes.

3. On-Demand Deletion ("Delete Now")

You retain absolute sovereignty over your uploaded content. At any time before the automatic retention timer expires, you can trigger the Delete Now action via the web interface or send a DELETE /v1/files/{id} API call. This immediately unlinks the file from filesystem storage.

4. No Tracking, Telemetry, or Model Training

FilePilot does not use tracking cookies, behavioral analytics, or device fingerprinting. Your uploaded documents, audio recordings, images, and videos are never analyzed, scraped, or retained for machine learning or model training purposes.

5. Security Isolation

File processing operations run in isolated non-root Linux containers with dropped capabilities. Decompression safety filters guard against zip-bomb denial of service attacks by enforcing a maximum 10x expansion ceiling and 20 GB ceiling.