Privacy Policy

1. Who processes your data

The personal data controller is sole proprietor Serhii Yevheniiovych Zainulin, Tax ID 3421217150, 20 Pokrovska Street, Bershad, Haisyn district, Vinnytsia region, 24400, Ukraine.

For privacy questions, email [email protected] or call +38 (096) 465-92-01.

2. Data we process

• Your email and technical account identifier.
• Drop details: title, expiry date, destination folder, status, and technical statistics.
• Upload metadata: name, size, date, and transfer status.
• A sender folder name, where the Drop owner requires one.
• An encrypted Google Drive access token for the Drop owner.

Large-file content is transferred directly to the Drop owner’s Google Drive. To speed up small files, they may briefly pass through DropToDrive technical infrastructure without being stored on persistent media, then are immediately forwarded to Google Drive. We do not use file content for advertising, profiling, or model training.

3. Why we use it

We need this data to create accounts and Drops, connect Google Drive, transfer files, protect the service from abuse, provide support, and perform our contract with you. The legal basis is contract performance, your consent where required, and our legitimate interest in service security.

4. Google Drive and third parties

At your request, DropToDrive receives limited Google Drive drive.file access. It is used only to create selected folders and upload files processed through the service. You can revoke access in your Google account settings or by contacting us.

We use Supabase for authorisation, database, and technical hosting; Google for Drive integration; and WayForPay for payment processing. We use PostHog for limited product analytics, such as public-page views and Drop-creation button clicks. We do not send file or folder names, Drop text, email addresses, or uploaded content to PostHog; session recordings are not made on Drop pages or in the dashboard. We do not store complete payment-card details.

5. Retention and security

We retain data only as long as needed to operate the account, meet legal obligations, and resolve disputes. Google Drive tokens are encrypted. No technical protection is absolute, so do not use a Drop to share links to confidential data without your own safeguards.

6. Your rights

You may request access to, correction, or deletion of your data; withdraw consent; or object to processing within the limits of law. Contact support by phone. We may ask you to verify your identity before acting on a request.

7. Policy updates

We may update this Policy. A new version applies from the publication date on this page. We will notify users of material changes by an available method.