FileMappy Privacy Policy
This Privacy Policy explains how Bun Labs ("we," "us") handles your information in connection with the FileMappy desktop application and related services (the "Service").
The only data the Service's AI features send off your device is file names (including extensions), file sizes, the names of the selected folder and its immediate subfolders, and the display language. We never transmit the contents of your files (text, image data, etc.), folder paths, or timestamps. Your files themselves never leave your device.
1. Information We Collect
(1) Account information: email address and password (stored in encrypted form).
(2) File structure information: information sent when you use AI features. AI Classify sends file names and the names of the selected folder and its subfolders; AI Rename sends file names, extensions, and file sizes.
(3) Organization rules: the classification and organization rules you create (these may contain names such as folder or client names).
(4) Usage data: AI feature usage counts and plan status.
(5) Payment-related information: the customer ID issued by Stripe, your plan, and payment status. Your credit card number never passes through our servers and we never receive or store it — it is handled directly by Stripe, Inc.
(6) Support inquiries: the content of emails you send to our support address.
2. How We Use Information
(1) Providing and maintaining the Service (authentication, AI processing, storing and syncing organization rules).
(2) Billing, payment processing, and plan management.
(3) Enforcing usage limits and preventing abuse.
(4) Responding to inquiries.
(5) Improving the Service (in aggregated, non-identifying form only).
3. Service Providers and International Transfers
We use the following providers. As a result, your information is processed and stored on servers outside Japan (primarily in the United States):
(1) Supabase (US): account authentication; storage of organization rules and usage data.
(2) Stripe (US): payment processing.
(3) AI provider: file structure information (Section 1(2)) is sent via our relay server for AI processing.
(4) Vercel (US): hosting of our relay server and website.
We do not otherwise share your personal information with third parties without your consent, except where required by law.
4. Retention
We retain personal information for as long as your account exists and as needed for the purposes described in this Policy. After account deletion, we delete your information within a reasonable period, except for records we are legally required to keep (such as payment records).
5. Your Rights
You may request access to, correction of, deletion of, or restriction of the use of your personal information. If you are located in the EU/EEA, the UK, or another jurisdiction with similar laws, you may exercise the rights provided under the GDPR and equivalent legislation (access, rectification, erasure, restriction of processing, data portability, objection, and lodging a complaint with a supervisory authority). To make a request, contact us at the address below. We will respond without undue delay after verifying your identity.
6. Account Deletion
You can delete your account (close it) at any time from the Settings screen in the app. If you cannot use the app, contact support@filemappy.com from your registered email address. Deletion removes your account information, organization rules, and usage data, except for payment records we are legally required to retain.
7. Security
We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, and leakage, including encrypted communications and access controls.
8. Advertising and Tracking
The application does not display advertising and does not perform advertising-related tracking.
9. Changes to This Policy
We may update this Policy as needed. For material changes, we will provide prior notice in the app or on our website.
10. Operator and Contact
Operator: Bun Labs (sole proprietorship, Japan)
Contact: support@filemappy.com
The operator's name, address, and phone number will be disclosed without delay upon request to the contact address above.
Effective date: August 21, 2026
Last updated: August 29, 2026
This document is a translation of the Japanese original. In the event of any discrepancy, the Japanese version prevails.