1. The privacy policy would be better placed as a separate page with its own link on the homepage.
2. The privacy policy currently has what looks like boilerplate text, which, at least to me, is totally inadequate when the claim is that the file is encrypted (and it's presumed that the platform cannot decrypt the file).