This policy explains what information Walnutcrew ("we") collects when your company uses walnutcrew.com and the Walnutcrew apps, and what we do with it. Your company decides what goes into Walnutcrew; for the files and data it stores there, we act on its behalf.
What we collect
- Account details: your name and email address, and your sign-in through email and password or Google, handled by Google Firebase Authentication.
- Your files: the files you and your colleagues upload, their names, folders, versions and sharing settings.
- Devices: the name and type of each computer or phone you sign in on, so you can see and remove them.
- Technical logs: IP addresses, browser or app details and request times, kept to run and secure the service.
- Free trials: when you start one, we keep a keyed one-way hash of your network address and of a random id stored in your browser for 90 days, only to spot repeated trials, never the address or id itself.
- Error reports: when something fails, what went wrong, the kind of page or request, your browser or app version, and random ids for your account and company. Never file or folder names, file contents, your name or email. On the website and in the iPhone and Android apps a report can include a replay of the moments before the error in which all text and typing is masked and images and media are blocked. On the website, 2% of page loads also send a timing trace: how long the page and its requests took, with page addresses reduced to their route (such as /s/:token) and the same scrubbing.
- Activity: who opened, changed, shared or deleted which file, and when, so your company's admins can see it.
- Billing: your company's plan, and the name and email of the admin who pays. Card details go straight to our payment provider; we never see or store them.
- Messages to us: what you send through the contact form, the in-app support form or by email. The in-app form adds your name, email, company, plan and the page you were on, so we can help faster.
What we use it for
To provide Walnutcrew: store and sync your files, share them the way you choose, keep versions and the trash, secure accounts, answer support requests and send messages about your account. We don't sell personal information, show ads, or use your files to train AI models, and we don't look at file contents except when you ask us to help with a problem or the law requires it.
Who processes it
These companies run parts of the service for us:
- Google Cloud (Firebase Authentication, Firestore and Cloud Run, in the United States)
- Backblaze (file storage in the United States)
- Cloudflare (website, downloads, live updates and email routing)
- Hetzner (the office document editor, in Germany, while a document is open)
- Amazon Web Services (Amazon SES, for sign-in codes, invitations and other account email)
- Sentry (Functional Software, Inc., in the United States), for error reports and, on the website and in the phone apps, masked replays of the moments before an error
- Our payment provider, which takes payments and handles sales tax and receipts
If your company's admin connects Microsoft OneDrive or SharePoint, Walnutcrew reads and writes the folders they choose through Microsoft's API, only to keep those folders in sync. Disconnecting stops this and removes our access tokens.
Cookies and local storage
The web app stores your sign-in in your browser so you stay signed in, and a yes/no flag in local storage (wf.signedIn) so our public pages show "Open your files" or "Sign in" right away; signing out removes it. Error reporting keeps a random session id in your browser's session storage, so a replay belongs to one visit. We don't use advertising or third-party tracking cookies.
How long we keep it
Files stay until your company deletes them; deleted files are kept in the trash for 30 days and then removed. Older versions beyond the last 25 (100 on Business and Pro) are removed automatically. When a company closes its account, we delete its data after giving it time to download everything. The activity log is kept for one year. It records which account did what; names of people come from the company's current list of people, so after an account is deleted its entries show the person as "Someone". Some entries keep a name of their own: the file or folder (it belongs to the company), the device someone signed in on (such as "Ana's MacBook Pro"), the address an invitation went to, and the personal space a file was in (such as "Ana's files"). When we delete an account, we also remove its device names, its email address in invitation entries and its personal space's name (which becomes "Former member's files"); file and folder names stay. Activity reports an admin downloaded earlier are copies outside our control. Database backups keep deleted records for up to 14 days. Other logs are kept for a limited time for security.
Your choices
You can ask to see, correct, export or delete your personal information. For a company account, your company's admin can do much of this directly; otherwise email support@walnutcrew.com and we'll respond within 30 days.
Changes
If we change this policy in a meaningful way, we'll update the date above and let account admins know.
Contact
Questions about privacy: support@walnutcrew.com.