BSX File Exchange

BSX File Exchange turns your WordPress site into a private file-sharing portal between you and your clients — no third-party services, no public links, no extra accounts.

You create Host/Guest pairs. Both sides can upload and download files. Every transfer is logged, every download is authenticated, and nothing is ever accessible by direct URL.

How it works

• Create a Host/Guest pair in the admin panel — linking any two registered users

• Both users log into your site and see their private dashboard via the [bsxfe_dashboard] shortcode

• Either side uploads a file — the other receives an email notification instantly

• Downloads go through a secure PHP endpoint with token-based authentication — no public file URLs ever exist

Who is it for

• Medical practices — share test results, prescriptions, and referrals with patients

• Law firms — exchange contracts, briefs, and case documents with clients

• Coaches and consultants — share materials, homework, and session notes with coachees

• Accountants — deliver reports, invoices, and tax documents to businesses

• Any service requiring private, tracked, bilateral document exchange with clients

Features

• Bidirectional exchange — both Host and Guest can upload and download files

• Secure storage — files live in /wp-content/uploads/bsx-file-exchange/ behind an.htaccess that blocks all direct access

• Token-based downloads — every download link is unique and authenticated; sharing the URL with someone else does nothing

• Email notifications — automatic alerts when a new file is uploaded

• Multi-pair support — one user can belong to multiple pairs; the dashboard lets them switch between pairs without page reload

• Read/unread tracking — recipients see which files are new

• Activity log — every upload, download, and deletion is logged with timestamp, IP address, and user agent; exportable as CSV

• Privacy modes — choose between pair-only visibility, admin read-only, or admin full access

• Frontend shortcode — embed the dashboard anywhere with [bsxfe_dashboard]

• Full wp-admin panel — manage pairs, view files per pair, browse activity, configure settings, and run system diagnostics from a dedicated Debug page

• Customizable color palette — set primary and secondary colors from Settings to match your brand

• Ultimate Member integration — adds a tab to UM account and profile pages automatically when Ultimate Member is active

• i18n ready — fully translatable, Spanish included

What’s included

• Unlimited Host/Guest pairs

• Bidirectional upload and download for all pairs

• Email notifications (sender name and address configurable)

• Frontend shortcode dashboard with drag-and-drop upload

• wp-admin panel with Pairs, Hosts, Guests, Activity, Settings, and Debug pages

• Activity log with CSV export

• File size limit configurable up to server maximum

• Configurable allowed file types (PDF, DOCX, XLSX, JPG, PNG, ZIP, and more)

• Optional data deletion on uninstall

Privacy Policy

BSX File Exchange stores the following data in your WordPress database:

• File metadata (filename, size, MIME type, upload date) linked to registered WordPress users

• Download and upload events with IP address and user agent string for audit purposes

• Email notification records (recipient, timestamp)

Anonymous usage tracking (opt-in only)

If you choose to enable anonymous usage tracking in Settings, the plugin sends the following data to the plugin developer once per week:

• Plugin version, WordPress version, PHP version

• Site language and whether multisite is enabled

• Number of active pairs (a count only, not the content)

• Whether Ultimate Member is active

• Server software type (Apache, Nginx, etc.)

The following data is never collected or transmitted: your domain name, IP addresses, usernames, file names, file content, or any personally identifiable information. A one-way hash is used to distinguish unique installations without identifying the site. This feature is disabled by default and can be enabled or disabled at any time from BSX File Exchange → Settings.

No data is transmitted to external servers unless you explicitly enable usage tracking. All files are stored locally within your WordPress installation under the standard uploads directory. Administrators can permanently remove all plugin data — including database tables, options, and uploaded files — by enabling the Delete all data on uninstall option in Settings before deactivating and deleting the plugin.