Last updated: [DATE]
This policy explains which personal data [COMPANY NAME] processes through Dropvik, for what purposes, and your rights under the GDPR and applicable local law.
1. Data we process
- Account data: name, e-mail address, password (hashed), plan, login times.
- Transfer data: the files you upload, file names and sizes, title and message, recipient e-mail addresses, retention period and password (hashed).
- Technical data: IP address, browser information, download times; used for security, abuse prevention and statistics.
2. Purposes and legal basis
We process your data to provide the service (performance of a contract), to keep it secure, to meet legal obligations and, based on our legitimate interest, to prevent abuse. Marketing-related processing only takes place with your explicit consent.
3. Retention
Files are deleted when the chosen period ends or when you delete the transfer, and are purged from backups within 14 days. Account data is kept while your account exists; download logs are kept for 12 months.
4. Transfers of data
Files are stored in data centres in the European Union (Germany/Finland) on Hetzner Online GmbH infrastructure. Web traffic passes through Cloudflare, Inc. These providers act as processors; data is never sold or shared for marketing.
5. Automated scanning
Uploaded files may be scanned automatically to detect malware and inappropriate content. Scan results are used for security purposes only.
6. Your rights
You have the right to access, rectify and erase your data, to object to processing and to data portability. Send requests to [E-MAIL]; we answer within 30 days.
7. Contact
Controller: [COMPANY NAME] · [ADDRESS] · [E-MAIL]