Pricing

Plans for private file delivery

Compare Free, Personal, and Pro plans for browser-encrypted file delivery, retained transfer storage, sessions, and automation access.

Free — $0/month

Free is for browser-based private delivery. It includes 100 MB of retained encrypted transfer storage, up to 20 active transfers, and transfers up to your remaining Free storage capacity, with a maximum transfer size of 100 MB. Sessions, the CLI, and the Service API are not included.

Personal — $10/month

Personal adds room for regular professional delivery: 5 GB of retained encrypted transfer storage, up to 100 active transfers, browser uploads up to 1 GB each, and up to 2 concurrent sessions. It remains browser-based, without CLI or Service API access.

Pro — $30/month

Pro is for higher-volume and automated workflows. It includes 50 GB of retained encrypted transfer storage, up to 1,000 active transfers, browser uploads up to 5 GB each, up to 10 concurrent sessions, and CLI plus Service API and Developer plugin project automation.

Developer plugin access

Free, Personal, and Pro can connect the ZipPigeon Developer plugin for account and transfer workflows within their plan limits. Sealed CLI project setup, service-account management, and automated encrypted delivery require Pro. Follow the public Developer Connector guide before enabling the production MCP endpoint.

How limits work

Retained storage includes encrypted transfer versions. Active-transfer capacity is released as soon as you archive or delete a transfer. Browser uploads use a bounded-memory pipeline: Free supports up to 100 MB, Personal up to 1 GB, and Pro up to 5 GB. CLI uploads remain at 100 MB, while browser and CLI downloads warn above that memory-reliability threshold until streamed downloads ship.

Included private delivery features

All plans support browser-encrypted sends, account invites, secure links, expiration controls, transfer status, archive, audit events, and passkey support. Default signed-in upload mechanics use 16 MiB encrypted parts and a 10,000-part server ceiling before deployment or storage policy applies.

What is not included yet

Formal SLAs, DPA terms, data-residency guarantees, customer-managed keys, SSO enforcement, and formal compliance reports are not yet public offers.

Best fit

ZipPigeon is best when you need to send a sensitive package to a specific person, not manage a long-term shared folder.

Frequently asked questions

What does the Free plan include?

Free includes 100 MB of retained encrypted transfer storage, up to 20 active transfers, and browser-based sending. A transfer can use the remaining available Free storage, up to 100 MB. It does not include sessions, the CLI, or the Service API.

What does the Personal plan include?

Personal is $10 per month and includes 5 GB of retained encrypted transfer storage, up to 100 active transfers, browser uploads up to 1 GB each, and up to 2 concurrent sessions. Personal is browser-based and does not include the CLI or Service API.

What does the Pro plan include?

Pro is $30 per month and includes 50 GB of retained encrypted transfer storage, up to 1,000 active transfers, browser uploads up to 5 GB each, and up to 10 concurrent sessions. Pro also includes CLI, Service API, and Developer plugin project automation.

Which plans can use the ZipPigeon Developer plugin?

Free, Personal, and Pro can connect it for account and transfer workflows within their plan limits. Only Pro can create CLI project profiles, manage service identities, or use Service API automation.

What happens if I reach a plan limit?

Your existing transfers remain available. Archive or delete transfers to free retained capacity, close sessions, or upgrade when a higher plan expands that quota. Browser uploads use bounded-memory encryption: Free supports 100 MB, Personal 1 GB, and Pro 5 GB per transfer. CLI uploads remain limited to 100 MB, while browser and CLI downloads warn above that memory-reliability threshold.

Send the file. Keep control of the link.

Use ZipPigeon when a file needs to reach the right person without becoming another attachment or shared folder to clean up later.

Open signed-in sender