Privacy Policy - Drivolt

1. Introduction

Drivolt ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital archive storage services.

2. Information We Collect

Personal Information

Name and contact information (email address, phone number)
Billing information and payment details
Company name (if applicable)
Account credentials

Stored Content

We store the digital files you upload to our service. We do not access, view, or analyze the content of your files except as necessary to provide our services or as required by law.

Usage Data

Log data (IP address, browser type, access times)
Storage usage statistics
Service interaction data

3. How We Use Your Information

To provide and maintain our storage services
To process payments and manage your subscription
To communicate with you about your account and services
To send important notices and updates
To improve our services and develop new features
To ensure security and prevent fraud

4. Data Security

We implement industry-standard security measures to protect your data:

256-bit AES encryption for data at rest
TLS/SSL encryption for data in transit
Regular security audits and monitoring
Secure, geographically distributed storage facilities
Access controls and authentication measures

5. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. Your stored files are retained according to your selected storage plan (up to 25 years for Lifetime plans). Upon account termination, we will delete your data within 90 days, unless legally required to retain it.

6. Your Rights

You have the right to:

Access and download your stored data
Correct inaccurate personal information
Request deletion of your account and data
Opt out of marketing communications
Export your data in a portable format

7. Third-Party Services

We use trusted third-party services for payment processing (Stripe) and email delivery. These providers have their own privacy policies and we ensure they meet our security standards.

8. Cloud Drive Connections (Google Drive & Dropbox)

If you connect a Google Drive or Dropbox account so we can pull files into your archive, the following limited, transfer-only access applies:

Google Drive. We use Google'sdrive.filescope, which means Drivolt can only read files and folders you explicitly hand to us through the Google Drive picker. We never list, scan, search, or otherwise enumerate the rest of your Drive. Drivolt's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Dropbox. We request thefiles.content.read,files.metadata.read, andaccount_info.readscopes — read-only. Drivolt cannot create, modify, or delete anything in your Dropbox.
Token handling. OAuth access tokens and refresh tokens are encrypted at rest with AES-256-GCM while a transfer is in flight. As soon as the transfer completes, is cancelled, or fails, those tokens are deleted from our systems. We do not retain credentials beyond the lifetime of the active transfer.
What we copy. Only the files and folders you explicitly select are copied. Native Google Workspace documents (Docs, Sheets, Slides) are exported to PDF, xlsx, and pptx respectively at fetch time so they remain readable in long-term archive form.
What we do not do. We do not use cloud-drive data to train AI/ML models, build advertising profiles, or share with third parties outside the infrastructure required to provide the archival service you contracted for.
Disconnecting. You can revoke Drivolt's access at any time from your Google Account permissions page or your Dropbox connected apps page.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: privacy@drivolt.us