Skip to main content

GDPR Compliance

Last Updated: May 12, 2026

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union. FileSutra is committed to GDPR compliance through a "Privacy by Design" approach.

1. Data Minimization

The most effective way to comply with GDPR is to not collect personal data in the first place. FileSutra follows the principle of data minimization by processing all files (Images and PDFs) locally in your browser.

  • We do not see your files.
  • We do not store your files.
  • We do not transmit your files to our servers.

2. Lawful Basis for Processing

We process anonymous analytics data based on Legitimate Interest to maintain and improve our service. For any non-essential cookies, we rely on user consent where applicable.

3. Your Rights under GDPR

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access: You can request a copy of the data we hold. (Note: Since we process files locally and don't have accounts, we typically hold zero personal data).
  • Right to Rectification: You can request that we correct inaccurate data.
  • Right to Erasure (Right to be Forgotten): You can request that we delete your data.
  • Right to Restrict Processing: You can ask us to stop processing your data.
  • Right to Data Portability: You can request your data in a machine-readable format.

4. Data Transfers

As a global service, some anonymous analytics data may be processed in countries outside the EEA, such as the United States (via Google and Microsoft). These transfers are protected by standard contractual clauses or other legal frameworks.

5. Data Protection Officer

If you have any concerns or wish to exercise your rights, please contact our Data Protection representative at: gdpr@filesutra.com

6. Lodging a Complaint

You have the right to lodge a complaint with a Data Protection Authority if you believe we have infringed your rights under GDPR.