About these Terms
These Terms of Use ("Terms") are an agreement between you and Roomo Labs Pty Ltd ("Roomo Labs", "we", "us" or "our"), the operator of StashTransfer.
By creating a Stash, uploading files, opening a collection link, previewing or downloading files, or otherwise using StashTransfer, you agree to these Terms and acknowledge our Privacy section. If you do not agree, do not use the service.
The beta service
StashTransfer provides a browser-based, temporary file-transfer service. A creator adds original files to a temporary Stash and shares a public link or QR code so a recipient can collect them without an account.
The current free beta ordinarily supports up to 1 GB per Stash and a 24-hour lifetime from creation, subject to supported file types and technical limits. Features, limits and beta availability may change under these Terms.
Who may use StashTransfer
You must be legally able to enter into these Terms. If you are under 18, use StashTransfer only with the permission and supervision of a parent or guardian who accepts responsibility for your use.
If you use StashTransfer for an organisation, you confirm that you have authority to accept these Terms for that organisation.
Accounts and fees
The current beta does not require an account and is free within the displayed limits. We will not charge you unless a future paid service clearly presents its price and you separately agree to it.
Your files and permission to transfer them
You keep ownership of files and other content you upload ("Content"). You give Roomo Labs a limited, worldwide, non-exclusive, royalty-free licence to host, copy, transmit, preview and delete that Content only as reasonably necessary to operate, secure and support the Stash you requested.
You confirm that you own the Content or have all rights, permissions and lawful authority needed to upload it, make it available to intended recipients and grant this limited licence. You remain responsible for the Content and the people you invite to collect it.
Public links and recipient access
A Stash link and its QR code are access capabilities, not passwords tied to a known person. Anyone who receives the public link may see the available file list and collect ready files until the Stash closes.
You are responsible for choosing recipients, sharing the link carefully and asking recipients not to forward it. Roomo Labs is not able to verify that a person opening a valid public link is the person you intended.
Acceptable use
You must use StashTransfer lawfully and with respect for other people, their privacy and their rights.
- Do not upload, request, share or collect content that is unlawful, exploitative, abusive, threatening, defamatory, fraudulent or invasive of privacy.
- Do not upload child sexual abuse material, intimate material shared without consent, malware, malicious code, stolen credentials or content intended to harm a person, device or network.
- Do not infringe copyright, trade marks, confidentiality obligations or other rights.
- Do not use the service for spam, bulk unsolicited distribution, automated abuse, excessive consumption of resources, security testing without written permission, or attempts to bypass limits or access another person's Stash.
- Do not misrepresent your identity, affiliation, authority or the nature of a file.
How deletion works
StashTransfer is transit, not permanent storage. You do not need to manually delete a Stash for ordinary expiry: the original file objects are scheduled for deletion when the creator removes a file, closes the Stash, or the Stash reaches its 24-hour expiry.
When a Stash expires or is closed, the collection link stops working and new preview or download access is blocked. The cleanup process then removes the original private file objects. A temporary outage may require cleanup to retry, so deletion is scheduled rather than guaranteed to happen at the exact expiry second.
Expired or deleted files may not be recoverable. Keep your own copy of anything important. Minimal operational metadata and provider logs may remain as described in the Privacy section.
- Creator removes a file: that file is scheduled for deletion.
- Creator closes the Stash: its remaining file objects are scheduled for deletion.
- Stash reaches 24-hour expiry: the link closes and its original file objects are scheduled for deletion.
Availability and changes to the service
StashTransfer is in beta. We aim to provide a reliable service, but transfers can be delayed or interrupted by browsers, networks, devices, maintenance, abuse controls or third-party infrastructure.
We may modify, pause or discontinue beta features and limits where reasonably necessary to improve the product, address security or abuse, comply with law, or manage infrastructure. Where practicable, we will make material changes reasonably clear. You can stop using the service at any time.
Third-party infrastructure
StashTransfer depends on third-party services, including Vercel for hosting and delivery, Supabase for portal database metadata, and Cloudflare R2 for private original file Storage. Their outages, restrictions and service terms may affect StashTransfer. Links to unrelated third-party websites are provided for convenience and are not controlled by Roomo Labs.
StashTransfer intellectual property
Roomo Labs and its licensors own the StashTransfer service, software, interface, branding and documentation, excluding your Content and third-party materials. These Terms do not transfer those rights to you.
You may use the service only for its intended file-transfer purpose. You must not copy, resell, reverse engineer or exploit protected parts of the service except where the law permits and that permission cannot be excluded.
Privacy
Our Privacy section explains the information handled when Stashes are created, shared, collected and deleted. Do not upload another person's personal or sensitive information unless you have a lawful basis and their permission where required.
Australian Consumer Law
Nothing in these Terms excludes, restricts or modifies a consumer guarantee, right or remedy under the Australian Consumer Law or another law that cannot lawfully be excluded, restricted or modified.
Where a guarantee applies and our liability can lawfully be limited, our liability is limited, at our option, to supplying the relevant service again or paying the reasonable cost of having it supplied again.
Liability
Subject to the non-excludable rights above, Roomo Labs is not responsible for loss caused by a user sharing a link with the wrong person, a recipient forwarding a link, unlawful or harmful Content, failure to keep a backup, incompatible files or devices, or events outside our reasonable control.
To the maximum extent permitted by law, Roomo Labs is not liable for indirect, incidental, special or consequential loss, loss of profits, loss of opportunity, loss of goodwill or loss of data arising from the beta service. This limitation applies only to the extent it is fair, reasonable and lawful in the circumstances.
Removing content or restricting access
We may remove Content, close a Stash, restrict requests or suspend access where we reasonably believe it is necessary to protect people or systems, enforce these Terms, respond to a complaint, prevent abuse, preserve evidence or comply with law. Urgent safety, security or legal circumstances may require action without advance notice.
Changes to these Terms
We may update these Terms as the service develops. The effective date at the top identifies the current version. We will make material changes reasonably prominent. New Terms apply from their stated effective date and do not revive an already expired Stash.
General
These Terms are governed by the laws of Victoria, Australia. The courts of Victoria and courts entitled to hear appeals from them have non-exclusive jurisdiction.
If a provision is invalid or unenforceable, it is to be read down to the extent necessary and the remaining provisions continue. A delay in enforcing a right is not a waiver of that right.
Contact and takedown requests
Contact Roomo Labs Pty Ltd at stashtransfer@pm.me about these Terms, suspected abuse, copyright, privacy, safety or a takedown request. Include the relevant Stash link and enough detail for us to assess the request, but do not email unnecessary sensitive files.
Who we are and what this policy covers
StashTransfer is a temporary file-transfer service operated by Roomo Labs Pty Ltd ("Roomo Labs", "we", "us" or "our") in Victoria, Australia.
This Privacy Policy applies when a person creates a Stash, uploads or collects files, visits the StashTransfer website, or contacts us. It explains how we handle personal information in connection with the current beta service.
Information we handle
A file may contain personal or sensitive information chosen by the creator. We do not inspect file contents as part of the ordinary transfer flow, but our systems must store and transmit the file to provide the service.
- Transfer content and metadata, including uploaded files, filenames, file type, file size, position, upload status, creation time and expiry time.
- Stash identifiers and security capabilities, including the public collection token and a hash of the creator capability. The raw creator capability is returned to the creator's browser and is not stored in our database.
- Transfer activity, including whether a Stash has been viewed or downloaded and an aggregate download count. The current application does not create recipient profiles or a detailed download-event history.
- Technical information processed by our infrastructure providers, which may include IP address, browser and device information, request time, requested path, response status, diagnostics and security signals.
- Information you send us directly, such as your email address, message and any supporting material included in a help, privacy, legal or takedown request.
What we do not currently build profiles from
The beta does not require an account, login, profile, contact list, payment method or permanent transfer library. The application does not currently use first-party advertising cookies, behavioural advertising or a first-party analytics SDK.
Our hosting and Storage providers may still process necessary cookies, request information or operational logs under their own service terms and privacy notices.
How we collect information
- Directly from creators when they select and upload files or close a Stash.
- From recipients when they open a public link, preview a file or request an original download.
- Automatically through the website, APIs, hosting network, database and private Storage systems when requests are made.
- Directly from you when you contact us.
Why we use information
- Create and operate a temporary Stash.
- Upload, hold, preview, transmit and delete original files as requested.
- Generate and validate creator and public collection capabilities.
- Show file metadata, transfer progress, expiry and aggregate download state.
- Protect the service, investigate errors, prevent abuse and enforce our Terms of Use.
- Respond to questions, privacy requests, complaints and lawful requests.
- Meet legal obligations and establish, exercise or defend legal rights.
Who information is shared with
We do not sell personal information or use file contents for advertising.
- Recipients: anyone who has the public Stash link or QR code can view the available file list and collect ready files before expiry.
- Supabase: provides the private database used for Stash records and file metadata.
- Cloudflare R2: provides the private object Storage used for original file objects and signed file transfer.
- Vercel: hosts and delivers the website and server routes and may process operational, security and request data.
- Professional advisers, regulators, courts, law enforcement or other parties where reasonably necessary to comply with law, protect people or systems, investigate abuse, or manage a corporate transaction.
Overseas processing
Our principal cloud providers are Vercel, Supabase and Cloudflare. Their infrastructure and subprocessors may process information outside Australia, including in the United States and other countries in which those providers operate. Database, object Storage, network delivery, support, security and subprocessors may involve different locations.
Where Australian privacy law applies, we take reasonable steps appropriate to our size and service to use reputable providers and protect information handled overseas. Provider locations and subprocessor arrangements can change over time.
Security and collection links
Original files are stored in a private bucket and are not given permanent public Storage URLs. Preview and download access uses short-lived signed URLs. Data is transmitted over HTTPS.
A public Stash link works like a key. Anyone who receives it can collect the files while the Stash is available. Creators should share it only with intended recipients, and recipients should not forward it without permission.
No online service is completely secure. Keep your own copy of important files and do not use StashTransfer as permanent Storage.
Retention and deletion
- Original file objects are scheduled for deletion when the creator removes the file, closes the Stash, or the Stash reaches its ordinary 24-hour expiry. Temporary outages or cleanup retries may delay completion.
- Signed preview and download URLs currently expire after approximately five minutes.
- Minimal operational metadata may remain after file deletion, including identifiers, filenames, type, size, timestamps, status and aggregate counts, where reasonably required for integrity, security, troubleshooting, legal compliance or dispute handling.
- Infrastructure and security logs are retained under our providers' operational and legal retention practices.
- Messages sent to us may be retained for as long as reasonably needed to respond, keep an appropriate record and meet legal obligations.
Access, correction and deletion requests
You may ask to access or correct personal information we hold about you, or request deletion where available, by emailing stashtransfer@pm.me. We may need enough information to verify the request and locate the relevant record, such as the Stash link or creator capability.
Because StashTransfer has no accounts and deliberately keeps little identifying information, we may be unable to connect a person with a particular Stash without an appropriate capability or other reliable evidence. We will explain our response and any lawful reason we cannot complete a request.
Privacy questions and complaints
Send privacy questions or complaints to stashtransfer@pm.me. Please describe the issue and include information that will help us investigate without sending unnecessary sensitive material. We will acknowledge and respond within a reasonable period.
If you are not satisfied with our response and the Australian Privacy Act applies, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.
Children
StashTransfer is a general file-transfer service and is not designed to collect information from children. A child should use the service only with the involvement of a parent or guardian who can understand these terms and supervise the files being shared.
Changes to this policy
We may update this policy when the product, providers or legal obligations change. The effective date at the top will identify the current version. Material changes will be made reasonably prominent on the website.
Contact
Privacy contact: Roomo Labs Pty Ltd, Victoria, Australia.