Terms of Service

1. Who we are and this agreement

1.1 Parties. These Terms of Service (the “Terms”) are an agreement between you and Smile Mask Technology FZE, a Free Zone Establishment licensed by the Dubai World Trade Centre Authority under Professional Licence L-3278, whose registered premises are at 504-30 TEC, Floor 03, The Offices 3, One Central, Dubai World Trade Centre, Dubai, United Arab Emirates (“we”, “us”, “our”). We operate the Service. Our details are also on our Legal notice.

1.2 The documents that make up the agreement. The agreement between you and us consists of:

• these Terms;
• the Acceptable Use Policy, which forms part of these Terms; and
• the Refund Policy, which forms part of these Terms.

The Data Processing Terms (the “DPA”) supplement these Terms and prevail over them for the processing of Covered Content, as the DPA defines that term. If the Acceptable Use Policy or the Refund Policy conflicts with sections 1 to 21 of these Terms, those sections prevail. Our Privacy Policy explains how we use personal data as a controller. It is a notice, not a term of the agreement.

1.3 How you accept. You accept these Terms and the Acceptable Use Policy when you first do any of the following: create an Account; upload content, with or without an Account; create an API key; or accept an invitation to a Workspace. If you do not agree, do not do any of these things. Opening a Published Page does not require an Account and is not acceptance of these Terms.

1.4 Acting for an organisation. If you accept these Terms for a company, organisation or other legal entity, you confirm that you are authorised to do so. The entity is bound by these Terms, and you and the entity are both responsible for what is done under the Account.

2. Definitions

These words have the following meanings wherever they start with a capital letter.

• Service means uploadthefile.com: the websites at uploadthefile.com, upload.tf, upltf.com and upl.tf, the Published Pages we host, the API (including the MCP and A2A connectors) and the browser extension.
• you means the person or organisation using the Service. Where a person accepts for an organisation, it means both.
• Account means a registered account. Account Holder means its holder. Workspace means a shared team space attached to an Account.
• Your Content means the files, pages and other material you upload or publish, and the metadata about them that you control.
• Published Page means Your Content made available at an address of the Service, including a custom domain or a short link.
• Visitor means anyone who opens a Published Page and is not its owner.
• Plan means the Free plan or a Paid Plan. Paid Plan means a paid subscription described on our pricing page.
• Merchant of Record means Polar Software, Inc.
• Consumer means a natural person who uses the Service for purposes outside their trade, business, craft or profession.
• AUP means the Acceptable Use Policy at /acceptable-use.
• Data Protection Law means the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and, where they apply, the EU General Data Protection Regulation, the UK General Data Protection Regulation and other data protection laws.

3. Eligibility and restricted territories

3.1 Age. You must be at least 18 years old to create an Account, to upload content and to buy a Plan or a domain. Viewing a Published Page does not require an Account. If we learn that an Account or an upload belongs to a person under 18, we may close the Account and remove the content.

3.2 Lawful use. You must not use the Service where doing so would be unlawful for you, or where a law or an order of a competent authority bars you from using it.

3.3 Restricted territories and sanctions. You may not access or use the Service from, or on behalf of a person located in, a territory listed on our Restricted Territories page, and you may not use a virtual private network, proxy or other means to appear to be elsewhere for that purpose. You may not use the Service if you are, or act for, a person named on a sanctions list issued by the United Nations Security Council, the United Arab Emirates, the United States, the European Union or the United Kingdom. We may refuse, suspend or close access, and refuse payment, where we reasonably believe this section is breached, and we may report as the law requires.

4. Accounts, Workspaces and API keys

4.1 Creating an Account. You can create an Account with an email address and password, a one-time sign-in link, or a third-party sign-in provider (Google, GitHub or Microsoft). You must give accurate and complete information and keep it up to date.

4.2 Security. You are responsible for keeping your credentials and API keys secure and for all activity under your Account. Tell us promptly at contact@uploadthefile.com if you suspect unauthorised use.

4.3 Workspaces. An Account Holder can invite other people to a Workspace and give each of them a role: admin, member, support or viewer. The Account Holder is the owner. Owners and admins can manage the Workspace’s content and members; billing stays with the owner; a viewer can only look. Content that a member publishes into a Workspace is published in the owner’s Account. The owner is responsible for the members’ use of the Service and for that content. A member’s access ends when the owner removes them.

4.4 API keys and connectors. An API key lets whoever holds it act as your Account within the permissions of the key. If you connect an AI assistant or another automated agent through the API, the MCP connector or the A2A connector, you authorise it to act for you and you are responsible for what it does. Use of the API is subject to the rate limits and conditions described in our documentation. If you give your own end users access to the Service through the API, you are responsible for their use under the AUP.

5. The Service

5.1 What the Service does. The Service lets you upload files and turn them into shareable links, and host content such as web pages at public addresses, including *.upload.tf subdomains, short links and custom domains you connect (see section 11). Features and limits are described on our pricing page.

5.2 Published Pages are public. A Published Page can be opened by anyone who has its address, unless you protect it with an access setting the Service offers, such as a password.

5.3 Uploading without an Account. You can publish a link without an Account. These Terms and the AUP apply to it in full. A link published without an Account is removed after 30 days. That period applies to links created from now on; a link that already exists keeps the expiry it was given. Without an Account you have no dashboard for the link. To remove it earlier, write to contact@uploadthefile.com. We cannot send notices to a person who uploads without giving us a contact address.

5.4 Free Plan pages. Pages you publish while signed in to a Free Account stay online for as long as you use your Account, and may carry a small upload.tf badge. We do not set an expiry date on them. If you do not sign in to or otherwise use your Account for 90 days, we delete the pages on it. We email the address on your Account about 7 days and again about 24 hours before the deletion, and signing in at any time before then keeps your pages and starts the period again. If you have switched off page-expiry notifications in your notification settings, you will not receive those emails, so sign in before the period ends. Pages on a Paid Plan are not deleted for inactivity. If your Plan changes from a Paid Plan to Free, this rule applies from the date the Plan changes. Pages we delete under this rule may be kept for a short, limited time in a restricted archive, as described in our Privacy Policy.

5.5 Availability and beta features. We work to keep the Service available. We do not promise that it will be uninterrupted or error-free, and we offer no service-level agreement. We sometimes offer features labelled beta, preview, early access or experimental. Those features are provided as they are, may be less reliable, and may be changed or removed (but see section 14.4 for anything included in a Paid Plan you have paid for).

5.6 AI features. Where a Published Page offers an AI assistant, such as chat with a PDF, an automated model generates its answers from the document and they may be wrong. The owner of the Published Page decides whether to switch it on.

5.7 Features that collect Visitor information. If you switch on a feature that collects information from Visitors (an email gate, a contact form, an email box or tracked links), you decide why and how that information is collected. Section 13 sets out what that means for you.

6. Your Content

6.1 Ownership. You keep all rights you have in Your Content. These Terms do not transfer them to us.

6.2 Licence to us. You grant us a worldwide, non-exclusive, royalty-free licence, for as long as Your Content is on the Service, to host, store, copy, transmit, display and make Your Content available to the public as you direct (including through the links and domains you create); to create the technical copies and derivatives needed to run the Service, such as previews, thumbnails, caches and file conversions; to screen it for illegal content and abuse as described in section 8; and to preserve and disclose it where the law requires. We may sublicense these rights only to the infrastructure providers listed on our subprocessors page, and only for these purposes. We do not use Your Content to train machine-learning models.

6.3 When the licence ends. The licence ends when Your Content is deleted from the Service. It continues for copies we must keep by law or under a legal hold (section 15.5), for archive copies we keep for a limited time as described in our Privacy Policy, and for residual copies that may persist for a limited time in backups, caches or logs before being overwritten in the ordinary course.

6.4 What you confirm. You confirm that you have all rights, consents and permissions needed to upload, publish and share Your Content; that Your Content is lawful and complies with the AUP; and that every person who is identifiable in it has consented where the law requires consent. Where Your Content contains personal data of other people, you confirm that you have a lawful basis to upload and share it. These confirmations apply even when you upload without an Account.

6.5 Your copies. The Service is not a backup service. Keep your own copies of Your Content.

6.6 Personal data in Your Content. You are the controller of the personal data in Your Content, or act for the controller. We process it as your processor under the DPA.

7. Acceptable use

You must follow the Acceptable Use Policy. It forms part of these Terms. It applies to everyone who uses the Service and to all of Your Content. Because we operate from the United Arab Emirates, UAE law applies to the content we host, in addition to the law where you are. In summary, the AUP prohibits content that is illegal under UAE law or the law that applies to you, content that harms children, other people or the Service, and activities that abuse or bypass the Service or the network rules that apply to it.

If you breach the AUP or these Terms, we may take the measures described in sections 8 and 15. Serious breaches may lead to immediate suspension and to a report to the competent authorities.

8. Content moderation and enforcement

8.1 The tools we use. We use a mix of automated checks and review by people. This is what the automated checks are:

• Known child sexual abuse material. Cloudflare’s CSAM Scanning Tool compares images served through Cloudflare’s cache with lists of hashes (digital fingerprints) of known child sexual abuse material. If an image matches, the Published Page is blocked automatically and placed under legal hold, without a person reviewing it first. A person then reviews the match. An Account is suspended only after a person confirms the match. We report confirmed material to the competent authorities. Cloudflare may also report matches to the National Center for Missing & Exploited Children in the United States under the terms of its tool.
• Adult content. An automated classifier operated by OpenAI assesses a reduced-size copy (about 640 pixels) of images, and of frames taken from videos. The assessment runs after a Published Page has been published. A result does not block, remove or restrict the page. It marks the page for review by a person, who decides. Files above 512 MB are not classified.
• Addresses in uploads and short links. We check the web addresses (URLs) in uploads against Google Safe Browsing. If an address matches, the upload is refused automatically. We re-screen the destinations of short links with Google Safe Browsing and urlscan.io.
• Phishing. HTML, SVG and ZIP-hosted sites are scored for phishing patterns. A high score alerts our team and creates an evidence record. It does not remove or restrict a page on its own.
• Abuse controls. Rate limits, bot checks and blocklists apply automatically and may slow, challenge or refuse requests.

8.2 People decide. Apart from the automatic block of a child sexual abuse material match, the refusal of an upload by Safe Browsing and the abuse controls above, a decision to remove, restrict or suspend because of a breach of the AUP or of the law is taken by a person. A person reviews reports and flagged items. These checks do not cover every file and we do not promise that illegal or harmful content will be found. Nothing in these Terms obliges us to monitor Your Content.

8.3 Measures we may take. We may remove Your Content or disable access to it; restrict access to a Published Page in a country where it is unlawful, for example for Visitors located in the United Arab Emirates, while leaving it available elsewhere; refuse an upload; limit a feature; suspend or terminate an Account; preserve content and records; and report to competent authorities, including UAE authorities.

8.4 Telling you. If we remove or restrict Your Content, or suspend a Published Page or an Account, and we hold a contact address for the affected Account Holder, we will tell them at the latest when the measure takes effect. The message will say what we did and for how long; the facts we relied on and whether we acted on a report or on our own initiative; whether automated means detected or decided it; the rule or law we relied on and why; and how to appeal. We do not send this message where the law forbids it, where it would endanger a child or an investigation, or for child sexual abuse material. We cannot send it where we hold no contact address, as with an upload made without an Account.

9. Reporting content

9.1 How to report. Anyone can report content that is illegal or breaches the AUP, without an Account, on our report form or by emailing abuse@uploadthefile.com. We accept reports in English. These channels do not depend on the Published Page displaying a report link.

9.2 What a report should contain. Please give the address of the Published Page (if you open the form from a report link, it already knows the page; otherwise put the address in your details); explain why the content is illegal or breaches the AUP; give your name and email address; and confirm that you believe in good faith that your report is accurate. You can report child sexual abuse material without giving your name or email address. If you give an email address, we use it to acknowledge and follow up your report. We do not tell the owner of the Published Page who made a report.

9.3 Intimate images published without consent. If an intimate image or video of you has been published without your consent, including one that has been created or altered digitally, you can ask us to remove it, or an authorised person can ask on your behalf. Use the report form (choose “Intimate image or video shared without consent”) or write to abuse@uploadthefile.com. Identify the content by its address, state in good faith that it is an intimate image published without consent, give your contact details, and sign the request (a typed name is a signature). We will remove the content within 48 hours of receiving a valid request and will make reasonable efforts to remove identical copies that we know of on the Service.

9.4 Copyright. Send copyright notices on the report form (choose “Copyright / trademark infringement”) or to abuse@uploadthefile.com. A notice should contain your signature; the work you say is infringed; the address of the material; your contact details; a statement that you believe in good faith that the use is not authorised by the owner, its agent or the law; and a statement that the information in the notice is accurate and that you are authorised to act for the owner. If we remove material because of a notice and you believe that was a mistake, write to abuse@uploadthefile.com, explain why, and give your contact details. We will consider what you send.

10. Plans, billing and the Merchant of Record

10.1 Plans. The Service has a Free plan and Paid Plans. Features, limits and prices are shown on our pricing page and before you pay.

10.2 The Merchant of Record. Polar Software, Inc. sells Paid Plans and domains as merchant of record and reseller. It charges you, handles the taxes that apply to the sale, and issues the invoice or receipt. Your contract for payment is with Polar and its buyer terms apply to the purchase, in addition to these Terms. We provide the Service.

10.3 Renewal and cancellation. A Paid Plan renews automatically for the period you chose (monthly or annually) until you cancel. You can cancel at any time in the billing section of your dashboard. Cancellation takes effect at the end of the period you have paid for. You keep access until then, and you are not charged for the next period.

10.4 Price changes. We will tell the Account Holder by email at least 30 days before a price change that affects their subscription. The new price applies from the first renewal after that notice period. You can cancel before then, and you will not be charged the new price.

10.5 Pay-as-you-go. If you opt in on a Plan that offers it, usage beyond the amounts included in the Plan is charged at the rates shown on our pricing page.

10.6 Refunds. Every Paid Plan payment can be refunded in full if you ask within 7 days of it. Domain registrations are non-refundable once registered. The Refund Policy sets out the rules. Nothing in these Terms limits a right to a refund or to withdraw that the law gives you as a Consumer.

10.7 Unpaid renewals, downgrades and locked content. If a renewal payment fails, we tell you by email and give you a period to pay. If it remains unpaid, we move your Account to the Free plan. The same happens when you cancel and the paid period ends. When an Account moves to a Plan with lower limits, whatever the reason, the content above the new limits is locked: it stops being served publicly, and you can still manage it and download your originals from your dashboard. If the move is to the Free plan, locked files are scheduled for permanent deletion. The standard period is 45 days from the lock, and the email we send you states the date that applies. Re-subscribing before that date unlocks the content. If you move voluntarily to a lower Paid Plan, locked content is not scheduled for deletion, and moving back up restores public serving.

11. Third-party services, custom domains and links

11.1 Sign-in providers. Google, GitHub and Microsoft provide the sign-in service you choose to use. Their terms govern that service. They are independent of us.

11.2 Services we rely on. The Service relies on third parties for hosting, storage, payments, email and other functions. They are listed on our subprocessors page. Their terms may apply to features that use them. We are not responsible for third-party services we do not control, except as the law requires.

11.3 Custom domains. You can connect a domain you own to a Published Page. You are responsible for its DNS settings and for keeping the domain registered. You can also buy a domain through the Service. Cloudflare Registrar registers it on your behalf and you are the registrant. You must give accurate registrant details, which are passed to the registrar. The registrar’s terms (including Cloudflare’s Domain Registration Agreement), the registry’s rules and ICANN rules apply, and they may allow a domain to be suspended, transferred or cancelled. A purchased domain renews annually through the Merchant of Record until you stop it. If you remove a domain from your Account, renewal ends at the end of the period you paid for. If a renewal is not paid, the domain may stop working with the Service and the registration may lapse. Domain registrations are non-refundable once registered; see the Refund Policy.

11.4 Links. The Service may contain, or let users publish, links to websites and resources we do not operate. We do not endorse them and are not responsible for their content, products or policies.

12. Intellectual property and feedback

12.1 Ours. The Service, including its software, design and trademarks, is owned by us or our licensors and is protected by law. We give you a limited, non-exclusive, non-transferable right to use the Service under these Terms. We do not grant you any right to our branding.

12.2 Feedback. If you send us feedback or suggestions about the Service, you grant us a non-exclusive, worldwide, perpetual, royalty-free licence to use them to operate, maintain and improve the Service, without obligation to you. This licence does not extend to Your Content.

13. Privacy and data protection

Our Privacy Policy explains how we use personal data as a controller: for accounts, billing, support, security and safety. For personal data in Your Content, and for personal data of Visitors that you collect through the features you configure, we act as your processor under the DPA. You are responsible for telling Visitors what you collect and why, and for having a lawful basis under Data Protection Law, including any consent the law requires. The safety and legal-compliance checks in section 8 are processing we carry out for our own purposes, as an independent controller. Our subprocessors are listed on our subprocessors page.

14. Changes to the Service and to these Terms

14.1 Material changes to these Terms. We may change these Terms, the AUP, the Refund Policy and the DPA. A change is material if it is adverse to you and it raises what you pay, reduces the features or limits of a Plan you have paid for, narrows your rights, widens our rights over Your Content, or limits our liability. We will give notice of a material change by email to Account Holders and on this site at least 30 days before it takes effect. The notice will say what changes and when.

14.2 Your right to leave. If you do not accept a material change, you may terminate the agreement and close your Account before the change takes effect. If you are on a Paid Plan, you will receive a pro-rata refund of the fees you prepaid for the unused part of the period, through the Merchant of Record. The changed version applies from its effective date.

14.3 Changes for legal, security or abuse reasons. A change that is needed to comply with a law or an order, to protect the security of the Service or other people, or to stop abuse may take effect immediately, on notice. You may terminate under section 14.2 if the change materially reduces what your Paid Plan includes.

14.4 Changes to the Service. We may add, improve, change or withdraw features. We will not remove or materially reduce a feature or limit that is part of a Paid Plan during a period you have paid for, except for the reasons in section 14.3, for reasons beyond our reasonable control (of which we will tell you as soon as we can), or after notice under section 14.1. If we stop offering the Service or a Paid Plan, we will give you at least 30 days’ notice, a chance to export Your Content, and a pro-rata refund of the fees you prepaid for the unused period.

14.5 Other changes. For any other change, we update this page and its “Last updated” date. You can ask us for an earlier version at contact@uploadthefile.com.

15. Suspension and termination

15.1 By you. You can stop using the Service and delete your Account at any time in your account settings. Deleting your Account ends renewal of any subscription at the end of the period you have paid for. It does not entitle you to a refund, except as the Refund Policy or the law provides.

15.2 By us. We suspend or terminate an Account or restrict access to the Service only for cause: a breach of these Terms or the AUP; a requirement of law or an order of a competent authority; a risk to the security of the Service or of other people; non-payment (section 10.7); or a Free Account that has been unused for the period in section 5.4, in which case that section applies. We may also stop offering the Service under section 14.4.

15.3 Notice. We will tell you the reason as set out in section 8.4. Except for a serious breach or where a law, an order or security requires immediate action, we will tell you what the problem is and give you a reasonable period to fix it before we terminate. We may suspend immediately, without prior notice, for child sexual abuse material, an imminent risk of harm, a security threat or a requirement of law.

15.4 Effects. When your access ends, your right to use the Service ends. Unless the reason is your breach, a law or an order, we give you a reasonable opportunity to export or download Your Content first. If we terminate a Paid Plan for a reason other than your breach, you receive a pro-rata refund of the fees you prepaid for the unused period. We stop serving Your Content at once and delete it from our live systems, subject to section 15.5, to archive copies kept for a limited time as described in our Privacy Policy, to the records we keep of reports, moderation decisions and administrative actions, and to residual copies in backups that are overwritten in the ordinary course.

15.5 Legal hold. We keep content that is, or that we reasonably suspect is, child sexual abuse material, and content that we are required by law or by an order to preserve, under a legal hold. Neither you nor we can delete it while the hold lasts, and it survives the deletion of your Account.

15.6 Survival. Sections 6.3, 8.4, 8.5, 12, 15.4, 15.5, 16, 17, 18, 19 and 20, and any other provision that by its nature should continue, survive termination.

16. Disclaimers

To the extent the law allows, the Service is provided “as is” and “as available”, without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose and non-infringement. We do not warrant that the Service will be uninterrupted, error-free or secure, that content will not be lost, or that the output of an AI feature is accurate. If you are a Consumer, this section does not exclude or limit any right that the law gives you and that cannot be excluded or limited by agreement.

17. Limitation of liability

17.1 What is not limited. Nothing in these Terms limits or excludes liability for fraud; for death or personal injury caused by negligence; for gross negligence or wilful misconduct; or for any liability that cannot be limited or excluded by law, including liability to a data subject under Data Protection Law.

17.2 Excluded loss. Subject to section 17.1, we are not liable for indirect or consequential loss, or for loss of profit, revenue or goodwill.

17.3 Cap. Subject to section 17.1, our total liability for all claims relating to the Service is limited to the greater of the fees you paid to the Merchant of Record for the Service in the twelve months before the event giving rise to the claim and US$100.

17.4 Consumers. If you are a Consumer, your mandatory rights under consumer protection law are not affected. Sections 17.2 and 17.3 apply to you only to the extent that law allows.

18. Indemnity

This section applies only if you are not a Consumer. You will compensate us for claims made by third parties, and for the resulting losses and reasonable legal fees, to the extent they arise from Your Content or from your breach of the AUP or of the law. We will tell you promptly of the claim and let you control its defence, unless the law requires otherwise. This section does not apply to a Consumer.

19. Governing law and disputes

19.1 Law and courts. These Terms, and any dispute about them or the Service, are governed by the laws of the Emirate of Dubai and the federal laws of the United Arab Emirates applicable there. The courts of Dubai have exclusive jurisdiction. These Terms contain no arbitration clause.

19.2 Consumers. Nothing in these Terms removes the protection that mandatory consumer-protection law gives you. In the United Arab Emirates that includes Federal Law No. 15 of 2020 on Consumer Protection and its executive regulations. If you are a Consumer in the European Union, the United Kingdom or another country whose mandatory law gives you this right, you keep the mandatory consumer protection of the law of the country where you live, you may bring proceedings in the courts of that country, and we will bring proceedings against you only there.

19.3 Talk to us first. If you have a complaint, please write to contact@uploadthefile.com so that we can try to resolve it. This does not stop you from going to court or to an authority.

20. General

20.1 Assignment. We may transfer these Terms to a company that takes over the Service, and we will tell you. If the transfer reduces the protection you have and you object, you may close your Account and receive a pro-rata refund of the fees you prepaid for the unused period. You may not assign these Terms without our written consent.

20.2 Force majeure. Neither of us is liable for a delay or failure caused by events beyond our reasonable control, including the failure of a utility, telecommunications or cloud provider.

20.3 Severability and waiver. If a provision is unenforceable, it is limited to the extent needed and the rest remains in force. A failure to enforce a provision is not a waiver of the right to enforce it later.

20.4 Notices. We give notices to you at the email address on your Account or in your dashboard, and on this site where this section or the law allows. You give notices to us at contact@uploadthefile.com. Notices of illegal content go to abuse@uploadthefile.com (section 9).

20.5 Entire agreement. The documents listed in section 1.2 are the entire agreement between you and us about the Service and replace any earlier agreement on that subject. These Terms create no rights for anyone other than you and us. Headings are for convenience only.

20.6 Language. We may publish this document in Arabic. If we do, and you are a consumer in the United Arab Emirates, the Arabic version prevails over the English version to the extent of any inconsistency; in every other case the English version prevails.

20.7 Parental controls. Parental-control protections, such as computer hardware, software or filtering services, are commercially available and may help limit access to material that is harmful to minors. Your device maker, operating-system provider and internet service provider can tell you about current providers.

21. Contact

The Service is operated by Smile Mask Technology FZE, a Free Zone Establishment licensed by the Dubai World Trade Centre Authority (Professional Licence L-3278). Registered premises: 504-30 TEC, Floor 03, The Offices 3, One Central, Dubai World Trade Centre, Dubai, United Arab Emirates.

Questions, complaints and notices about these Terms: contact@uploadthefile.com. Reports of illegal content and requests from authorities: abuse@uploadthefile.com.