Data portability, backups and continuity

Osrasoft’s commitments for Fileaify, effective from 11 October 2026, apply to every plan, including Free. This policy forms part of the Terms of Use.

Your data remains recoverable

You retain your rights to your content. You can retrieve it to continue working elsewhere without renewing a subscription or upgrading your plan. Downgrading does not delete retained data or prevent its return to the workspace owner.

Under My account → Data portability and export, the workspace owner can request an encrypted archive containing:

• projects, including retained archived or deleted states, their documents and all retained versions;
• methods, definitions, rules, templates, proposals and publication decisions;
• services, connections, bindings, vault credentials and files, with all retained versions, including revoked items;
• workspace members, roles, permissions, access requests and audit records;
• review reports, their configuration and the requesting owner’s eligible personal conversations and attachments.

Other members’ private conversations, deleted conversations and conversations containing sources from other workspaces are not disclosed to the owner through this export. Login passwords, sessions, agent and invitation tokens, and payment credentials are not exported. Individuals can request the return of their personal data excluded from this archive through Support. Passwords and technical access credentials will need to be recreated in the destination service.

Vault export requires explicit authorization

The complete export is separate from the ordinary document ZIP, which contains no vault values. The complete export requires workspace ownership, authentication within the last ten minutes, confirmation of the workspace name and explicit permission to export the vault. This authorization expires after ten minutes, is valid for one attempt only and is recorded in the audit log. It grants no permission to an agent or another member.

The archive is protected with AES-256-GCM using a random key generated in the browser. The key is sent to the server over HTTPS to encrypt the archive, without being saved in the database, logs or archive. The owner saves this key separately. Fileaify cannot recover a lost recovery key; while the workspace remains accessible, a new export with a new key can be requested.

The downloadable recovery tool works offline in a browser supporting Web Crypto. It decrypts the archive without a Fileaify account, network calls or AWS access. The resulting ZIP contains Markdown, JSON and vault files in their original formats. Its manifest describes relationships and SHA-256 file hashes. It enables data migration without promising automatic import into every third-party application. Previous permissions must not be reactivated automatically.

The decrypted ZIP contains plaintext secrets: protect its storage and transmission. Keep the archive and its key in separate locations and verify recovery before closing your account.

Assistance when leaving

Direct export is limited to 64 MiB of prepared data to protect service resources. Above that limit, or if export cannot complete, contact Support: Osrasoft provides a complete encrypted return of data, without an exit fee, within thirty calendar days of an authenticated request specifying its scope. No partial export is presented as complete. Identity verification and third-party rights remain protected in the assisted process; no secret is sent in plaintext by email.

Cancelling a subscription stops renewal under the Terms of Use; it does not automatically close the account or delete its contents. A request for permanent closure includes a recovery period of at least thirty days, unless the account holder explicitly requests faster deletion or a legal obligation requires otherwise. Legal retention obligations and third-party rights continue to apply.

Backup policy

Osrasoft creates a consistent daily backup of Fileaify metadata: projects, relationships, referenced versions, permissions and application data. The copy is checked, compressed and encrypted with AES-GCM before transfer from the VPS to S3, which also uses KMS encryption. Fourteen recovery points are retained on the VPS; remote copies are retained for at least that period.

Documents and vault values are stored in S3 objects that are immutable to the application, with versioning and KMS encryption. They are not included in the SQLite backup file. Restoring the service therefore requires the metadata, S3 objects and corresponding keys. The offline-recoverable export allows the owner to keep an independent copy.

Each backup run verifies metadata restoration in an isolated directory and reads back the copy transferred to S3 to check its integrity. Osrasoft keeps a copy of the backup key outside the VPS.

Document history, operational backups and personal exports serve different purposes.

Planned service shutdown

If Osrasoft decides and schedules a permanent shutdown, account holders will be informed by email and an in-service announcement at least sixty calendar days before shutdown. During this notice period, access to content and export tools is maintained; assistance with data return remains available. Paid renewals stop no later than closure; paid periods extending beyond closure are refunded proportionally.

This notice period does not cover a sudden outage, legal prohibition or event making continued operation materially impossible. In these situations, Osrasoft informs users as soon as possible and arranges data return using the data still available, without promising technically impossible recovery.

For data return or continuity questions, contact Support or contact@osrasoft.fr. Do not send any key or secret in plaintext.