Yes. Smash is compliant with the General Data Protection Regulation (GDPR).
We have designed Smash with privacy and data protection in mind, and we apply GDPR principles across our product, infrastructure, and internal processes.
Data storage
Files are stored as close as possible to the sender’s location in order to ensure optimal performance and compliance.
Smash hosts files in several regions worldwide, mainly within the European Union.
Data is never duplicated across regions and is stored in a single location only.
Files are automatically deleted once the availability period set by the sender expires.
This strict limitation of data retention is a core GDPR principle we fully apply.
Confidentiality
Smash does not access, view, or analyze the content of files transferred through the platform.
Access to data is strictly limited and only possible in exceptional cases, and solely at the explicit request of the user for technical support purposes.
Smash never sells, rents, or shares user data for commercial purposes. No AI training is done with your files.
Security measures
We rely on industry-standard technical and organizational measures, including:
Secure infrastructure and access controls
Encryption mechanisms
Strict internal access management
Anti-virus protection
Independent third-party audits (annually)
These measures are designed to protect personal data against unauthorized access, loss, or alteration.
If you have any questions related to GDPR compliance or data protection, feel free to contact our team.
We are committed to providing clear and transparent answers.