Legal & Contact

1. Who we are

We communicate in English. We aim to answer every email within two working days.

2. How to reach us

Automatic emails about transfers come from transfer@megtransfer.com. Please use the addresses above to contact us.

3. How to report illegal content

Anyone can report a transfer, without an account, using the Report link on its download page, the report form, or by email to report@megtransfer.com. So that we can act quickly, please include:

1. the transfer link (it starts https://app.megtransfer.com/t/) and, if relevant, the names of the files;
2. why you believe the content is illegal or breaks our Acceptable Use Policy — for example which law;
3. your name and email address, if you would like us to confirm receipt and tell you what we decided (you do not need to give these to report child sexual abuse material); and
4. a statement that you believe in good faith that the information in your report is accurate and complete.

We confirm receipt, decide promptly and carefully, and tell you what we decided and how you can seek redress. Reports of child sexual abuse material, terrorism and threats to life are reviewed first, normally within a few hours. For copyright, see our Copyright Policy.

Child sexual abuse material: do not download, copy or forward it, even to us. Send us the link only, and you can also report it to the Internet Watch Foundation at iwf.org.uk/en/uk-report. If anyone is in immediate danger, call 999 (or 112 in the EU).

When we remove content or restrict an account, we send the user a statement of reasons and they can appeal. See sections 4 to 6 of our Acceptable Use Policy and our complaints procedure.

4. EU Digital Services Act contact points

• Single point of contact for Member State authorities, the European Commission and the European Board for Digital Services (Article 11): legal@megtransfer.com. Languages: English.
• Single point of contact for users of the service (Article 12): support@megtransfer.com, or the report form. Languages: English. Messages are read and answered by a person, not an automated system.
• Legal representative in the EU (Article 13): [TO FILL: EU representative name and address].

Meg Transfer is a hosting service under the Digital Services Act. We are a micro enterprise, so we do not publish the transparency reports required of larger services, but we make the voluntary commitments in sections 6 and 7 below.

5. Guidelines for law enforcement and other authorities

What we hold

Meg Transfer is built to keep as little as possible. Files are deleted automatically when a transfer expires — after at most 14 days — and cannot be recovered after that. For each transfer we keep, for 12 months after it ends: the sender's email address, the IP address used to create it, recipients' email addresses, the title and message, file names and sizes, the dates it was created, sent and expires, and download counts. For account holders we also hold the account email address, sign-up date and subscription status. We keep server logs, including IP addresses, for up to 30 days. We do not hold payment card details (our reseller Paddle does) and we cannot read password-protected content in any other way than by downloading it with the password.

How to send a request

• Email legal@megtransfer.com from an official address of your organisation, on letterhead or a signed form, giving your name, rank or role, contact telephone number, the legal power you are relying on, and the specific transfer links, email addresses or accounts concerned.
• UK authorities: we disclose data voluntarily under the crime and taxation exemption in Schedule 2 to the Data Protection Act 2018 where the request is specific, necessary and proportionate, and in response to production orders, warrants and other compulsory legal process. Requests for communications data should be made under the Investigatory Powers Act 2016 where it applies.
• EU authorities: we accept orders to act against illegal content and orders to provide information under Articles 9 and 10 of the Digital Services Act at legal@megtransfer.com or through our EU representative, and confirm receipt and what we did without undue delay.
• Other countries: we need a request made through a UK mutual legal assistance process, or under an agreement that applies to UK providers (such as the UK–US Data Access Agreement), except in an emergency.

Preservation

Because files are deleted on a short schedule, please send a preservation request as early as possible. On a valid request we will disable the transfer and stop its files and records from being deleted for 90 days (renewable once on request) while you obtain the necessary legal process.

Emergencies

If there is a risk of death or serious harm to a person, email legal@megtransfer.com with "EMERGENCY" in the subject line, explaining the emergency. We will consider disclosing information without legal process where the law allows it. We also tell the police ourselves if we become aware of information giving rise to a suspicion that a criminal offence involving a threat to someone's life or safety has taken place, is taking place or is likely to take place.

Telling users

We tell users about requests for their data before disclosing it, so they can seek legal advice, unless the law prohibits it, a court has ordered us not to, or telling them would risk harm to a person or to an investigation.

Child sexual exploitation and abuse

We report child sexual exploitation and abuse content to the National Crime Agency as the Online Safety Act 2023 requires, and preserve the related information as the law requires.

6. Our commitments

• We do not scan the contents of files, sell personal data, or show advertising.
• A person reviews every report and every appeal.
• We give reasons when we remove content or restrict an account, and offer an appeal.
• We keep our Online Safety Act risk assessment up to date, review it at least once a year, and before making any significant change to the service.

7. Transparency

Each year in January, starting in January 2027, we will publish on this page a short summary of the previous calendar year: the number of reports we received and by type, how many transfers we removed and why, how many accounts we restricted, how many appeals we received and their outcome, how many reports we made to the National Crime Agency, and how many requests we received from authorities, by country, and how many we complied with.

8. Our legal documents

• Terms of Service — the agreement for using Meg Transfer, including complaints and the data processing terms for business users
• Privacy Policy — how we handle personal data
• Cookie Policy — the few cookies we use
• Acceptable Use Policy — what you may and may not send, and how we enforce it
• Subscriptions & Refunds — Pro subscriptions, cancelling and refunds
• Copyright Policy — notices, counter-notices and repeat infringers