Privacy
BondFile is operated by whoever deploys this site. There are no user accounts.
What is stored
- The address, state, report type, and optional tenant name you type.
- Photos, a smaller JPEG preview when your browser can make one, notes, and yes/no ratings.
- The SHA-256 hash of each original file, the server time the upload arrived, and the EXIF capture time if the file has one.
- An optional email address, used only to send the private link.
- GPS coordinates only if you tick the consent box. They are read from the photo metadata, not from a live location prompt.
- A hash of the network address, kept for up to 48 hours, to limit automated report creation. The raw address is not stored in the database.
- A Stripe checkout session id after you start payment. Card numbers stay with Stripe.
Who can see the photos
Photos are not public. They are served only through the private report link. Do not share the link with anyone who should not see the property. Cloudflare request logs available to the site operator can include that link, because it is part of the URL.
The original photo file is stored as uploaded. If your camera embedded a location and you do not tick the GPS box, BondFile does not copy that location into the report or the PDF, but it can still be inside the original file. Turn off camera location if you do not want that.
How long it is kept
Reports, photos, and generated PDFs are deleted automatically 24 months after the report is created, so a move-in record is still there at the end of a 12-month lease. A scheduled job deletes the database rows and the files in object storage. Download anything you need before then.
Where it is hosted
The site runs on Cloudflare Workers. Report data is in Cloudflare D1. Photos and generated PDFs are in Cloudflare R2. Email, if configured, is sent with Cloudflare Email Sending or Resend. Payments are processed by Stripe.
If you leave the email field blank, nothing is emailed. If you fill it in and email is not configured, the link is only shown on screen.