Privacy

1. Summary

2. Who we are and how to contact us

KDrive is a service of Techsstuff LLC, the data controller: it decides why and how the personal data described here is handled. In this policy, “we” and “us” mean Techsstuff LLC, and “you” means a person who uses KDrive.

Email [email protected] with questions about this policy or your account, and [email protected] with privacy requests and legal notices. You can also call +1 307-256-7988.

3. The data we handle

We handle these categories of data:

• account data, such as your email address, your name and your settings;
• your content, meaning your files, and information about it, such as names, folders, sizes and dates;
• sharing and anonymous transfer data;
• technical data we need to run and secure the service;
• billing data, which our payment processor handles if you subscribe; card details go straight to the payment processor and we never see your full card number;
• data from services you connect, such as account labels and records of backups and copies;
• the emails we send you about your account and your transfers.

A person who has a share link sees what you share through it. Anonymous transfers need no account, and abuse limits apply to them. A record of a transfer can be kept after its files have expired.

If you sign in with Google, Google gives us your name and email address to create or find your account.

4. How we use data and our legal bases

We use personal data for the purposes below and for nothing else. Where the GDPR or a similar law applies to you, this is the legal basis we rely on.

• Providing the service, including storing and delivering files, sharing, Backups, transfers, billing and account emails. Basis: performing our agreement with you.
• Security and abuse prevention. Basis: our legitimate interest in keeping the service secure and working.
• Meeting our legal obligations, such as accounting records and lawful requests from authorities. Basis: our legal obligations.
• Where you ask us to, such as connecting an account. Basis: your consent, which you can withdraw.

We do not use personal data for advertising and we do not build advertising profiles.

5. Encryption and security

We protect data with technical and organisational measures that fit the risk. We never store your password in readable form. No system is perfectly secure. If a security incident affects your personal data, we will tell you as the law requires.

KDrive-side encryption is a Pro feature. KDrive holds the keys, so it is not end-to-end encryption. Files on Free and anonymous transfers are not encrypted by us, and information about files, such as names, is not encrypted. Files that we do not encrypt can be read by anyone with access to the underlying storage. Use Pro if your files need encryption. No one at KDrive opens your files except with your agreement, to investigate abuse or a bug, or when the law or a court requires it. This is a rule we follow, not something the system enforces.

6. Who receives data

We share personal data only with these categories of recipients, and only as far as each needs it:

• our hosting provider;
• our network and security provider;
• our payment processor, if you subscribe;
• our email service;
• our secrets manager and internal tooling;
• the services you connect;
• the webhook addresses you add;
• authorities, where the law or a court requires it.

We do not sell personal data.

7. Accounts and services you connect

You can connect Google Drive, OneDrive, Dropbox or S3-compatible storage. KDrive accesses only what you choose and authorise.

7.1 Backups

Backups are a Pro feature. KDrive sends your files to the destination you connect as plain, readable copies: KDrive decrypts encrypted files first, so anyone who can open the destination can read them. The destination's own terms and privacy policy apply to the copies. Deleting a destination in KDrive does not delete the remote copies.

7.2 Cloud 2 Cloud Transfer

Cloud 2 Cloud Transfer is a Pro feature. It copies files you choose, once, from an account you connect into your KDrive or into another of your accounts. Copies are made only for accounts you connect.

The file bytes pass through our network provider's systems while they are being copied. KDrive does not store them on the way. When you copy to another of your accounts, KDrive keeps no copy and writes only into the “KDrive Transfers” folder there. KDrive reads a source account with read-only access. It never changes or deletes anything in the account it reads from.

KDrive uses the access you grant only to list and read the files you choose to copy and to write them into the account you choose. It does not use the data for advertising, does not sell it, and does not share it with anyone except our network provider, which carries the bytes while they are copied, and the account you choose to copy into.

No one at KDrive reads the files you copy: a person opens them only with your agreement, to investigate abuse or a bug, or when the law requires it.

7.3 Google

KDrive's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

For Google Drive, KDrive lists and reads only the files and folders you choose to copy, with read-only access, and writes only into a folder it creates for a Backup destination or a copy into Drive. KDrive shares this data only with the destination you pick and with our network provider while it is in transit, and never uses it for advertising or sells it.

The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.

7.4 Disconnecting and revoking access

Disconnect an account on the Cloud 2 Cloud Transfer page or on the Backups page. KDrive then deletes the sign-in or keys it stored. You can also remove KDrive yourself at the provider:

• Microsoft personal accounts: https://account.live.com/consent/Manage
• Microsoft work or school accounts: https://myapps.microsoft.com
• Google and Dropbox: remove KDrive from the connected apps in your account security settings.
• S3-compatible storage: delete the access key you gave KDrive.

Deleting your KDrive account disconnects every connected account. We never delete the copies that already are in a destination.

7.5 Webhooks

Webhooks are a Pro feature. KDrive sends a message to each HTTPS address you add when something changes in your drive. Whoever runs that address receives the message.

8. Cookies and local storage

We set only the cookies the service needs, and none for advertising or tracking. They keep you signed in, protect the steps where you sign in with Google or connect an account, remember a display choice such as list or grid, and remember that you unlocked a password-protected share link.

Browser storage keeps a few settings on your own device, such as your theme and your view. It is not sent to us.

Our network provider may add its own measurement script to the pages it delivers. Where a page asks a bot check (sign-up and anonymous transfers), your browser loads code from our network provider. That provider's own policies apply.

9. How long we keep data

We keep data while your account exists and as long as we need it to provide the service and to meet our legal duties. Your content stays until you delete it or your account. Deleted files stay in the trash for the period your plan sets, and earlier versions remain available as your plan sets, and are then removed from our live systems. Short-lived technical records are removed once they are no longer needed. Copies in backups and at our providers age out on their own schedules. Some records of anonymous transfers may be kept.

10. Your rights and how to use them

Depending on where you live, you may have the right to access your data, correct it, delete it, receive it in a portable form, object to or restrict how we use it, and withdraw consent you gave.

In the app you can change your name and password in Settings, delete files, and delete your account: open Settings, then the Account tab, type DELETE in “Type DELETE to confirm”, enter “Your password” if your account has one, and select “Delete my account”. It cannot be undone.

For anything the app does not cover, there is no self-service export of your account data: write to [email protected] from the address of your account, so we can match the request to the account.

You also have the right to make a complaint to a supervisory authority, such as the data protection authority where you live or work.

11. International transfers

We store your data in the European Union. Our company is outside the European Union, and some of our providers process data in other countries. When you open a page or file, the data travels to your location. Write to [email protected] with questions about international transfers.

12. Children

KDrive is not for anyone under 16. We do not check your age when you sign up, so we rely on you to follow this rule.

If you think a child under 16 has an account, write to [email protected] and tell us. We delete such an account.

13. Changes to this policy

The date at the top of this page shows when the policy last changed. If we make a material change, we will describe it in a notice on this page.

14. Contact

Write to [email protected] with questions about this policy or your account, and to [email protected] with privacy requests and legal notices, or call +1 307-256-7988. Our terms describe the rules for using KDrive.

We disclose information about how our systems work only where the law or a court requires it.