Privacy Policy
Last updated August 27, 2026
File Intake ("we," "us") provides a document collection tool that professional service firms ("firms," "you," if you're a firm admin) use to request and receive documents from their own clients ("clients"). This policy explains what we collect, why, and how it's handled for both audiences.
If you're a firm admin
We collect:
- Your name, firm name, and email address, when you sign up
- Nothing else to sign in — login is passwordless, handled entirely by our authentication provider (Supabase Auth) via a one-time link or code sent to your email
- The names, email addresses, and (optionally) phone numbers of clients you create requests for
We use this to run your account, send the emails you ask us to send on your behalf (document requests and reminders), and to provide support if you contact us.
If you're a client uploading documents
You reach this service through a link your firm sent you — you never create an account or a password with us. When you upload a document, we store:
- The file itself (e.g. photo ID, bank statement, tax form)
- Your name, email, and phone number, as provided by your firm
- The time you uploaded it
Your documents are stored in a private location and are only accessible to the firm that requested them, or to us if we need to provide technical support. We do not sell, share, or use your documents for any purpose other than delivering them to the firm that requested them.
Because our direct relationship is with the firm, not with you, requests to access, correct, or delete your information should go to the firm you're working with — they control the request, and we act on their instruction.
Where data is stored and who else sees it
We use a small number of infrastructure providers to run this service, each of whom processes data only as needed to provide their service to us:
- Supabase — database and file storage
- Vercel — application hosting
- Resend — delivering the emails the app sends
How long we keep data
We retain client documents and information for as long as the firm's account with us is active, or until the firm deletes the specific request. Firms can archive or permanently delete a client request (including its uploaded files) from their dashboard at any time.
Security
Documents are stored in a private location that is never publicly accessible — viewing or downloading a file requires either the firm's authenticated session or a short-lived, unguessable link generated at the moment it's needed. Connections to this app are encrypted (HTTPS) end to end.
Questions
If you have questions about this policy, contact support@fileintake.app.