Snapshot 209876
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Privacy Policy
Effective as of December 18th, 2025
This Privacy Policy provides information regarding how We process personal information collected through our Website and Product, for which We act as Controllers. The Controller entities are Crazy Ant Labs Ltd. and Crazy Ant Labs LLC (each and collectively, "Crazy Ant Labs" or "Company")
Any capitalized terms not otherwise defined herein shall have the meaning assigned to them in our Terms of Use, of which this Privacy Policy is an integral part and is incorporated therein by reference.
What Information do We Collect?
We receive and process Personal Information You actively provide to us when You submit contact forms, through the registration process to our Services, and/or through Your account settings; as well as Personal information We collect through Your use of our Services, such as browsing pages, clicking on buttons.
More particularly, We process the following Personal Information:
Usage information customarily logged by SFTP server software, including the date and time of Your visit, the originating IP address, and access to files. We also get usage data from third parties such as Google Analytics, who may place tracking pixels in our Website. Collectively, We call this "Usage Data".
Information You provide us when You sign up to the service or modify Your profile or account information such as email addresses, names, organization names, billing or information of users provided to us by partner marketplaces that is intended to regulate and administer our commercial relations (e.g. Heroku Elements) ("Registration, Billing, and Administration Data”).
Information from prospective customers who communicate with us via e-mail or on our Website for example to ask for product information or quotes ("Correspondence Data").
Information from users who download assets such as whitepapers, eBooks, or other resources ("Subscriber Data").
In addition, whenever You interact with Our Website or Service, Your IP address, browser and device information may be processed using "Cookies". For more information on that please see the "Cookies" section below.
You are not required under any applicable law to provide us with any of the personal information listed here. However, if You choose not to share or allow the collection of such personal information it may have an adverse effect on Your ability to use our services, depending on the functionality and the information You wish to withhold. In some cases, We may not be able to provide You with the services at all, such as if You choose not to provide any personal information required to establish an account for You or to process payments from You.
In addition to the above Personal Information, We also collect the following information which also includes Personal Information; however, We process this Personal Information as Processors; therefore our processing of Customer Data, Customer Metadata and Account Data, as defined hereinbelow, is governed under our Data Processing Agreement; and not by this Privacy Notice. This disclosure is only included here for informational purposes.
The actual contents of the files uploaded to Your SFTP To Go service ("Customer Data"). We are not aware of the contents of the Customer Data and to whether and to which extent it contains Personal Information.
Metadata about Your Customer Data that is distinct from the actual content itself ("Customer Metadata"). Customer Metadata includes file and folder names, creation and modification dates, permissions, and size information.
Metadata about Your account, not tied to any specific file ("Account Data"). Account Data includes general account settings, users and their associated data (passwords, access restrictions, customer support tickets associated with them etc.)
Cookies and Other Tracking Technologies
“Cookies” are identifiers We transfer to Your browser or device that allow us to recognize Your browser or device and tell us how and when pages and features in our Services are visited and by how many people. You may be able to change the preferences on Your browser or device to prevent or limit Your device’s acceptance of cookies, but this may prevent You from taking advantage of some of our features.
Our Services may place and access certain first-party Cookies on Your computer or device. First party Cookies are those placed directly by Us and are used only by Us. We use Cookies to facilitate and improve Your experience of Our Services and to provide and improve Our services.
By using Our Services, You may also receive certain third-party Cookies on Your computer or device. Third-party Cookies are those placed by websites, services, and/or parties other than Us. We use third-party Cookies for advertising and analytics, enabling us to better understand how people use Our Services.
Cookies that We may use can generally be categorized as follows:
Necessary Cookies: These cookies are necessary to load the Website or to allow users to use Website’s certain features.
Analytics Cookies: These cookies track information about how the Website is being used so that We can make improvements and report on our performance.
Preference Cookies: These first party cookies store Your Website preferences.
Marketing Cookies: These are usually third-party cookies by advertising platforms or networks to: (i) deliver ads and track ad performance, and (ii) enable advertising networks to deliver ads that may be relevant based upon Your activities.
We may use additional tracking technologies to help us understand user activities and preferences. For example, We may use web beacons (also known as clear gifs, pixel tags or web bugs) to track user activities and communicate with cookies. You cannot opt out of web beacons used in webpages, but You can limit their use by opting out of the cookies they interact with. You can opt out of web beacons used in emails by setting Your email client to render emails in text mode only.
You can change Your browser's settings to delete cookies that have already been set and not to accept new cookies. To learn more about how to do this, visit the help pages of Your browser. Some useful information can also be found here: https://www.allaboutcookies.org/. Please note, however, that if You delete cookies or do not accept them, You might not be able to use all the features We offer, You may not be able to store Your preferences, and some of our pages might not display properly.
For What Purposes do We Use Your Personal Information?
"Usage Data" and "Correspondence Data" are used to help us understand how the service and our Websites are being used and to help us improve our Websites and the service. From GDPR perspective, our Lawful Basis for doing this is our legitimate business interests, as provided in Article 6(1)(f).
"Registration, Billing, and Administration Data" as well as "Correspondence Data" is used to reply to any requests or inquiries You make, communicate with You regarding the Service, including announcements of new features, changes to Terms of Use/Privacy Policy, information about pricing changes, systems outages, service and support related communications, and other Service-related announcements that may impact Your use of the Services. From GDPR perspective, our Lawful Basis for this processing is to enable our contracting and to perform our contract, as provided in Article 6(1)(b); in addition, We may communicate with You to request feedback and conduct surveys regarding our Services, in which case We would be conducting this processing based on our Legitimate Business Interests, as provided in GDPR Article 6(1)(f).
"Subscriber Data" is used to maintain our outgoing communications lists, and to send You occasional email communications which may include updates, promotional materials, or information related to our services. All such communications will be made subject to Your consent, if required under the laws applicable to You; or subject to providing You with an opportunity to opt out of future communications at any time. From GDPR perspective, our Lawful Basis applicable to this processing is Your Consent, as provided in Article 6 (1)(a).
We do not sell or share Your data with advertisers or other unrelated third parties.
We will not use Your Personal Information for any personal profiling and automated decision making regarding You based on such profiling.
You are entitled to opt out of any non-solicited marketing communications, however any transactional communications related to billing, service notices, and updating of legal documents are not subject to the right to opt out, as long as We have an ongoing business relationship or outstanding liabilities.
Additional Purposes of Processing Your Personal Information:
In addition to the above uses of Your Personal Information, We will also process Your Personal Information for the following purposes:
We use all the above Personal Data to operate, maintain, and provide You with the Website and to provide You with the support and services as requested by You.
To prevent, detect and fight fraud or other illegal or unauthorized activities.
To ensure legal compliance – from our side (to legal requirements that apply to us and to our obligations under the Terms of Use) and from Your side (compliance with legal requirements applicable to You and with the Terms of Use).
Compliance with the Law: We may disclose Your information if We believe it’s necessary in order to comply with the law, such as to comply with a subpoena, regulation or legal request, respond to a government request, to address fraud or security issues, to protect the safety of any person, to enforce our agreements with You; to investigate, prevent, or take other action regarding illegal activity, suspected fraud or other wrongdoing or to protect our own rights or property. This includes sharing such information with our legal counsels. If You are located in the EU, We may only do so based on legal requirements specified above by EU authorities.
Business Transfers: If We are in a bankruptcy, merger, acquisition, change in control, reorganization or sale of assets, Your information may be transferred as part of that transaction to a successor in interest and may be accessed and reviewed by the applicable legal authorities as well as legal counsels and other professional counsels involved such as accountants, and other officers of the government or of the applicable judiciary instance. In addition, Your information may be provided for review in the course of due diligence for investment or other financing of our Company. To the extent possible under applicable law, We will seek to ensure confidential treatment of Personal Information disclosed under such circumstances.
We use anonymized, aggregated data to gain insight into how You and other users use the Website and services and try and improve them, as well as to plan our marketing and advertisements.
With Whom do We Share Your Personal Information?
We share Personal information with our contractors and service providers for the purpose of facilitating our operations and the delivery of the Services. We currently use service providers and software platforms that enable payment processing (such as billing, payment processing, payment gateway and accounting services); platforms for mass emailing and mailing list management; cloud storage services, web hosting services, CRM platforms, service and support ticketing platforms, internal communication platforms and CMP tools for consent management. Our service providers do not have any right to use Your Personal Information beyond what is necessary for the purpose of facilitating the functionality thereof providing the Products and/or Services to You and supporting our operations.
We engage only such third-party providers that are bound to contractual terms of confidentiality and privacy protection that are essentially in line with our obligations towards You with respect to privacy and Personal Information protection. In addition, We evaluate and monitor our third-party service providers prior to engaging them and thereafter, periodically, to ensure they maintain appropriate safeguards aligned with our security, confidentiality, and privacy obligations.
In addition, We will share Your Personal Information with other parties as described in this Privacy Policy or the Terms of Service under the section "Additional Purposes of Processing of Your Personal Information".
Data Transfers and Global Processing
The Services may be operated in countries other than Your own location, and Your Personal Information may be accessed and/or processed from and/or transferred to countries other than Your own location. We may do this where data is accessed/processed:
By Company and its affiliates for operational, administrative, compliance purposes or customer support teams in our various locations; including USA and other countries with Adequacy status
By our service providers, for the purposes We specified under “With Whom do We share Your Personal Information?”. We currently have service providers processing Personal Information in the EU and the US.
The safeguards We deploy for performing such transfers across boundaries:
Adequacy. Transfers to certain locations may be made based on an adequacy decision made by the European Commission, including, without limitation, the adequacy granted to the US-EEA Privacy Framework.
Model Clauses. With some of our processors, for protecting personal information transferred outside of the EEA, to other locations, and subsequent onward transfers (e.g. from EEA to third countries, and from there onwards to the USA) We use standard contractual clauses approved by the European Commission that are binding standards of processing of Personal Information committed to contractually by third parties processing information for us and on our behalf, as well as additional safeguards as may be required according to our transfer risk assessments, depending on the circumstances of each transfer
Consent. In the absence of an adequacy decision or Model Clauses, and in the absence of any other right to transfer Your personal information, Your consent shall serve as the basis for such transfer. By accessing and using the Website, You agree and understand that Your information may be transferred from the EEA or other countries in which You may be using or accessing the Website, to other jurisdictions outside Your own location (including outside the EEA).
Company will take steps reasonably necessary to ensure that Your Personal Information is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Information will take place to an organization or a country unless there are adequate controls in place including the security of Your Personal Information.
Data Retention
When You cancel Your subscription and Your organization is deleted, all Your Customer Data and Customer Metadata as well as Account Data will be deleted within 7 days.
Usage Data, Registration and Billing and Administration Data and Subscriber Data will be deleted or anonymized in accordance with our data retention policy, which is determined based on the standards and criteria specified below. Generally, the Personal Information will be retained for no longer than is necessary for the purposes stated in this Policy, unless otherwise extending the retention period is required by law. The data storage period varies depending on the type of data and its purpose.
The standards Company uses to determine the retention period are as follows: the time required to retain Personal Information to fulfill business purposes; maintaining corresponding transaction and business records; controlling and improving the performance and quality of the Service; handling possible user queries or complaints and locating problems; whether the user agrees to a longer retention period; whether the storage limitations or retention times are subject to the policies of a third party such as service provider, and whether the laws, contracts, and other equivalencies have special requirements for such data retention.
Is Your Personal Information Secure?
Your account is protected by a password for Your privacy and security. You must prevent unauthorized access to Your account and personal information by selecting and protecting Your password appropriately and limiting access to Your computer or device and browser by signing off after You have finished accessing Your account.
We have implemented controls designed to prevent our employees or contractors from improperly using Your Customer Data for purposes other than those set forth in this Privacy Policy. Our employees and contractors will not access Your Customer Data unless explicitly authorized to do so by You, e.g. as part of troubleshooting an issue with Your account.
In addition, We implement administrative, technical, and physical safeguards designed to protect personal information and customer data. These controls align with industry standards and support our commitment to security, including our pursuit of SOC 2 compliance. However, no system can guarantee absolute security, and unauthorized access, hardware or software failures, or other unforeseen factors may compromise data at any time. We regularly review and update our security controls to adapt to new threats, vulnerabilities, and industry's best practices. You can read more about these technological and operational measures on our security page. Because Crazy Ant Labs does not know what data You upload via the service, it is Your responsibility to ensure that those technological and operational measures are appropriate for the categories of data that You are uploading.
Can I Opt-Out of Communication?
You may opt in or out of communications related to our offers and information about our new services at any time by sending an email to support@sftptogo.com.
However, if You are an active customer, You may not opt out of receiving transactional communications such as billing, updates related to Your subscriptions, service notices, updates related to our legal documents to which You are bound or other notices or notifications issued thereunder.
Data Subject Rights
Depending on Your location and on the laws that are applicable to You, You may be entitled to some or all the following rights:
The right to access – You have the right to request Company for copies of Your Personal Information, which includes the right to obtain confirmation as to whether or not Personal Information concerning You are being processed and, where that is the case, access to the Personal Information and the purposes of the processing; categories of Personal Information concerned; recipients or categories of recipient to whom the Personal Information have been or will be disclosed; where possible, the envisaged period for which the Personal Information will be stored; the existence of the right to request rectification or erasure of Personal Information or restriction of processing of Personal Information or to object to such processing; the right to lodge a complaint with a supervisory authority; where the Personal Information are not collected from the data subject, any available information as to their source; the existence of automated decision-making, including profiling; the appropriate safeguards relating to the transfer of Your Personal Information outside the EEA. We may charge You a small fee for this service under certain conditions.
The right to rectification – You have the right to request that Company correct any information You believe is inaccurate. You also have the right to request Company to complete the information You believe is incomplete.
The right to erasure – You have the right to request that Company erase Your Personal Information, under certain conditions.
The right to restrict processing – You have the right to request that Company restrict the processing of Your Personal Information, when: (a) You contest the accuracy of Your Personal Information, for a period allowing Company to verify the accuracy of said Personal Information; (b) if You believe Personal Information has been unlawfully processed and You wish to restrict processing rather than delete it; (c) Company no longer needs the Personal Information but You require to keep it in order to establish, exercise or defend a legal claim; or (d) You have exercised Your right to object to the processing (below) for a period allowing Company to consider whether Your legitimate grounds override those of Company.
The right to object to processing – You have the right to object to the processing of Your Personal Information at any time – this means You have the right to stop or prevent Company from processing Your Personal Information (it could be in relation to part or all of Your Personal Information, and for part or all of the processing purposes). When relating to processing for marketing purposes, You have an absolute right to object; while for other purposes, the existence of the right depends on what lawful basis the processing relies on.
The right to data portability – You have the right to request that Company transfer the Personal Information that We have collected to another organization, or directly to You, in a common format, under certain conditions.
If allowed by applicable laws, You have the right to withdraw Your consent at any time when Company processes Your Personal Information based on Your consent on any of these rights. However, withdrawal does not affect the legitimacy and effectiveness of how We process Your Personal Information based on Your consent before the withdrawal is made; nor does it affect any data processing based on other lawful bases other than Your consent.
You may exercise these rights to the extent these rights apply to You by emailing Company to support@sftptogo.com. We will respond to Your request within the applicable time frame prescribed by applicable law. Although We will make reasonable efforts to accommodate Your requests, in some circumstances We may deem Your request unfounded or not eligible under applicable law. In such instances We reserve the right to refuse Your request. We shall require, as pre-requisite to fulfilling any request, to verify Your identity which We may do by asking You to provide certain information or identification to ensure that all data subjects’ privacy is protected.
If You think that the way We process Your Personal Information does not comply with applicable data protection laws, You are of course invited to contact us and We will consider Your request, but in any event, You may contact the relevant competent data protection authority. You can obtain the contact information for all the EEA data protection authorities at: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en .
If You have questions or concerns about personal information in data for which We act as data processor, We encourage You to communicate with the data controller for the data. If You make EU/GDPR rights requests to Us regarding data where We are the data processor, We will refer any such request to the relevant data controller, who is the party primarily responsible for implementation of those rights and establishing the Lawful bases of processing.
Changes To This Privacy Policy
We reserve the right to modify this Privacy Policy at any time. Changes and clarifications will take effect immediately upon their posting on the Website. Where appropriate, We will notify customers about material changes via email in advance.
“Do not track” Disclosure
We do not monitor or respond to Do Not Track browser requests. Hence please ensure to change any settings of Your browser and/or our Services, whenever You wish cookies to cease.
Privacy questions or issues?
If You'd like more details about our Privacy Policy, please email us: support at sftptogo.com.
SOC 2
HIPAA
GDPR