Using StashTransfer
These Terms of Use are an agreement between you and Roomo Labs Pty Ltd ("Roomo Labs", "we", "us" or "our"), the operator of StashTransfer.
By creating or opening a Stash, uploading, previewing or downloading files, you agree to these Terms and our Privacy Policy. Do not use StashTransfer if you do not agree.
The service and its limits
StashTransfer is a temporary file-transfer service. Free Stashes support up to 1 GB. An active Big Stash supports up to 5 GB. Stashes normally expire 24 hours after they are created.
Only one Big Stash can be active at a time. We may change limits, features or availability where reasonably needed for security, abuse prevention, legal compliance or service operation.
Your files and shared links
You keep ownership of your files. You give us the limited permission needed to host, transmit, preview, secure and delete them in order to operate the Stash you request.
A Stash link or QR code works like a key: anyone who receives it can access the available files until the Stash closes. You are responsible for sharing it only with intended recipients and for keeping your own copy of important files.
Use StashTransfer lawfully
You must have the right to upload and share the files you use with StashTransfer.
- Do not share unlawful, harmful, exploitative, abusive, fraudulent, privacy-invasive or infringing material.
- Do not share malware, stolen credentials, intimate material without consent, child sexual abuse material or content intended to harm people, devices or networks.
- Do not spam, automate abuse, bypass limits, test security without permission or try to access another person's Stash.
Big Stash and payments
Where Big Stash checkout is available, its one-time price is shown before you confirm. Stripe processes payment details; StashTransfer does not receive or store your card number.
If checkout is marked as Stripe Test Mode, it is for testing and does not take a real payment. We use your verified email and the minimum purchase references needed to recognise and recover Big Stash access, as described in our Privacy Policy.
Deletion, availability and liability
Files are scheduled for deletion when you remove them, close the Stash or it expires. A temporary outage can delay cleanup, and expired files may not be recoverable. StashTransfer is not permanent storage.
We aim to provide a reliable service, but browsers, networks, third-party providers, maintenance and safety controls can delay or interrupt transfers. To the extent permitted by law, we are not responsible for indirect loss, lost data, missed access, or loss caused by a link being shared with the wrong person. Nothing in these Terms excludes rights that cannot lawfully be excluded under the Australian Consumer Law.
Changes, law and contact
We may update these Terms as the product develops. The effective date identifies the current version. These Terms are governed by the laws of Victoria, Australia.
For help, privacy, copyright, safety or takedown requests, email stashtransfer@pm.me. Include the relevant Stash link where possible, but do not send unnecessary sensitive files by email.
Who we are
StashTransfer is a temporary file-transfer service operated by Roomo Labs Pty Ltd ("Roomo Labs", "we", "us" or "our") in Victoria, Australia.
This Privacy Policy explains how we handle information when you use StashTransfer or contact us.
What we handle
Files can contain personal or sensitive information. We do not inspect file contents in the ordinary transfer flow, but must store and transmit them to provide the service.
- Files and transfer details, including filenames, types, sizes, upload status, timestamps, expiry and aggregate download state.
- Technical and security information created when the site or a link is used, such as IP address, browser or device information, request time, path, response status and diagnostic signals.
- Messages you send us, including your email address and the information you choose to provide.
- For Big Stash, a verified email and the minimum purchase and access references needed to activate or recover access. Stripe handles card details. Our application database uses a protected email reference and purchase status, not your card number.
How we use and share it
We use information to run Stashes, transfer and delete files, secure the service, prevent abuse, resolve errors, provide support and meet legal obligations. We do not sell personal information or use file contents for advertising.
- Recipients can access files when they have a valid public Stash link or QR code.
- Cloudflare R2 provides private object storage for original files; Supabase provides authentication and database services; Vercel hosts the application and server routes; Stripe processes Big Stash payments.
- We may disclose information to advisers, regulators, courts or law enforcement where reasonably necessary to comply with law, protect people or systems, or investigate misuse.
Links and security
Original files are held in private object storage. Preview and download access uses short-lived signed links, and information is transmitted over HTTPS.
A public Stash link works like a key. Anyone who receives it can collect files while the Stash is available, so share it carefully. No online service can be completely secure.
Retention and deletion
File objects are scheduled for deletion when removed, when a Stash is closed, or at its normal 24-hour expiry. An outage or retry can delay cleanup. Minimal metadata and provider logs may remain where reasonably needed for security, integrity, troubleshooting, legal compliance or dispute handling.
Big Stash access information and support messages are kept while reasonably needed to provide or recover access, respond to you, and meet legal obligations.
Overseas processing
Our cloud and payment providers may process information outside Australia, including where they and their subprocessors operate. We take reasonable steps to use reputable providers and safeguard information, but provider locations can change.
Your choices and contact
To ask for access to or correction of personal information we hold about you, or to raise a privacy concern, email stashtransfer@pm.me. We may need information to verify your request and locate the relevant record.
If you are not satisfied with our response and the Australian Privacy Act applies, you may contact the Office of the Australian Information Commissioner.
Changes to this policy
We may update this policy when the product, providers or legal obligations change. The effective date identifies the current version.