WeTransfer
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The policy describes staff access for safety and legal checks.
They take your files, device data, and ads tracking; you own files but they can moderate, auto-renew, and cap .
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, files you send, recipient emails, device IDs, approximate location, usage, and inferred interests.
Read the exact line
Privacy policy
“We collect the content you create, upload, or share through the use of our Services. This includes files, photos, videos, audio, metadata, messages, comments, reviews, descriptions, and any other content you upload or share through our Services.”
Training
They run the service, show ads (sometimes personalized), market to you, and improve the product.
Read the exact line
Privacy policy
“Serve and measure the effectiveness of both non-personalized and personalized advertisements on both our Services and third-party services.”
Sharing
Service providers, ad and marketing partners, affiliates, other users you send to, and sometimes police.
Read the exact line
Privacy policy
“We transmit your information to serve you with our advertisements. We also share information with our advertising partners to measure the effectiveness of our advertising services.”
Kept
Expired files are usually deleted in 48 hours; other data can be kept as long as they say they need it.
Read the exact line
Privacy policy
“Your User Content will be deleted automatically and permanently from our servers within 48 hours from the expiration you selected if it's not set to “Recoverable” or otherwise within 1 year after expiration, unless you choose to delete it earlier.”
Controls
You can email privacy@wetransfer.com, use account settings, or Your Privacy Choices to object or withdraw consent.
Read the exact line
Privacy policy
“To exercise any of the above rights, please contact us via privacy@wetransfer.com.”
Fine print
Plans auto-renew and fees are usually non-refundable.
No exact line could be verified.
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Object to ads or withdraw consent
Your Privacy Choices or account settings, or privacy@wetransfer.com
Cancel auto-renewing subscription
Account settings on the Sites, or the App Marketplace account settings if you bought in an app
of your personal data
Account settings where available, or email privacy@wetransfer.com
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Third-party ad cookies can track you across other websites, not just WeTransfer.
Read the exact line
Privacy policy
“Advertisement cookies are used for commercial, editorial and promotional purposes. With these cookies your internet- and surf behaviour can be followed over various domains and websites.”
For example, after you send a file, an advertiser might later show you ads on another site based on that visit.
If someone sues them because of how you used the service, you may have to pay their legal bills.
Read the exact line
Terms of service
“You will and hold us, our affiliates, our and our affiliates’ directors, officers, agents, employees, partners, licensors, contractors, permitted successors and permitted assigns”
For example, if a file you sent leads to a lawsuit against WeTransfer, they can ask you to cover their lawyers.
If you cancel mid-period, you generally do not get money back for unused time.
Read the exact line
Terms of service
“Except as otherwise expressly stated in these Terms, all fees and taxes are non-refundable.”
For example, if you cancel a yearly plan after a week, they keep the full year payment.
They can cut off your account immediately without warning for many reasons they choose.
Read the exact line
Terms of service
“We may suspend without prior notice your access or your account (if any) and any portion or all of the Service for any reason”
For example, they could lock you out of a transfer you need today without emailing you first.
They guess things about you, like age range and interests, from how you use the site.
Read the exact line
Privacy policy
“We infer information such as attributes (e.g. age-range) and interests based on your data and your use of our Services.”
For example, they might label you as interested in design software based on the files you send.
People can look at your files when they think something is illegal or against the rules.
Read the exact line
Privacy policy
“We also use automated means as well as human moderation to investigate, detect, and act against (suspicions of) illegal or unwanted activity or User Content.”
For example, a moderator might open a zip you uploaded if it is flagged as malware or CSAM.
You still own your files, but they get a free license to use them to run and improve WeTransfer.
Read the exact line
Terms of service
“You hereby grant us a license to use your Content for the purposes of operating, developing, and improving the Service, all in accordance with our Privacy & Cookie Policy.”
For example, they can process your video so the download link works and to improve the product.
Account and other personal data can stay as long as they say they still need it, including years for tax.
Read the exact line
Privacy policy
“WeTransfer retains your personal information as long as its necessary to provide our Services to you (e.g. upholding your user account), to conduct our business activities and fulfill our ”
For example, billing records may be kept about seven years even after you leave.
You must be at least 16; they rely on you (or a parent) saying that, not a hard ID check.
Read the exact line
Terms of service
“THE SERVICE IS NOT AVAILABLE TO INDIVIDUALS UNDER THE AGE OF 16.”
For example, a 15-year-old could still type an older age and create an account.
Normal transfers are wiped from their servers soon after they expire.
Read the exact line
Privacy policy
“Your User Content will be deleted automatically and permanently from our servers within 48 hours from the expiration you selected if it's not set to “Recoverable””
For example, a 7-day transfer should be gone from their servers about two days after day seven.
Sending a file does not make WeTransfer the owner of that file.
Read the exact line
Terms of service
“We do not claim any ownership rights to the Content. You or your licensors own and retain all right, title, and interest, including all intellectual property rights, in and to the Content.”
For example, your client still owns the design PDF you sent through the link.
Words to know
Legal words from the lines above, in plain English.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- de-identified
- Data with your name and obvious identifiers removed, though it can sometimes still be traced back to you. For example, your chats with names stripped out may still be kept and studied after you delete your account.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- human review
- Company staff or contractors may read your messages or content, usually to check for rule breaking. For example, a flagged private chat with an AI can be read by a person at the company.
- worldwide license
- You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
How we got here · grade C · score 45/100 · 15 of 15 policy answers backed by a verified quote · 1 not stated
What does the app collect beyond what it needs to work?
They collect files, recipient emails, device IDs, IP-based location, cookies, usage, inferred interests, and data from ad partners—more than needed just to send a file.
Does it record your voice, face or body, and what happens to that?
They do not describe recording your voice or face as biometric IDs; audio or photos only appear if you upload them as files.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
They say humans and software review content to find illegal or unwanted activity and to enforce the terms, not routine sampling of all transfers.
Are you profiled or tracked for advertising?
They use their own and third-party ad cookies that can follow you across sites, plus personalized ads when they have permission.
Do they sell or share your data, and can you opt out?
They share with service providers, affiliates, marketing and ad partners; personalized ads need permission, and you can object or use Privacy Choices.
What rights do they take over what you type and what the AI makes?
You keep ownership of your files; they take a royalty-free license only to operate, develop, and improve the service.
How long do they keep your data after you delete it, and can you delete it in the app?
Expired files are usually deleted in 48 hours, but they keep personal data as needed and mention keeping financial information for 7 years.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They infer attributes like age-range and interests from your use, but they do not describe a memory feature you can view or turn off.
Do they commit to basic security, and have they leaked data?
They describe encryption, access limits, monitoring, staff training, and industry standards, but not a named audit or leak history.
Is there a real age gate, and are teens protected?
The service is for people 16 and over; US terms also say a parent must agree if you are under the age of majority. No ID check is described.
Will they tell you when the rules change, and is the policy specific?
The privacy policy is dated July 2025 and they say they will email you if material changes affect how they use your data; continued use still means you accept.
Can they close your account without warning, and can you get your data out first?
They may terminate for any reason with prior notice, and may suspend without notice. Export of files depends on your plan and is not guaranteed after close.
If something goes wrong, who pays?
The service is as-is, liability is capped at what you paid in 12 months or $100, and you must indemnify them for claims tied to your use.
Do subscriptions renew on their own, and can you get a refund?
Subscriptions auto-renew and, except where the terms say otherwise (such as some EEA consumer rights), all fees are non-refundable.
The privacy policy is 5,928 words at a college level (Flesch reading ease 44.1); the terms are 20,620 words at a college level.
