Privacy Policy

VirtualDrive ("we," "our," or "us") operates the VirtualDrive website (virtualdrive.us), web application (app.virtualdrive.us), iOS application, and Android application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

We collect the following categories of information:

• Account Information: Email address, display name, and profile photo (optional) provided at registration. • Usage Data: IP addresses, device type, operating system, browser type, pages visited, features used, and timestamps of interactions. • Files and Content: Files, folders, and metadata you upload or create within the Service. This content is encrypted and stored on your behalf. • Payment Information: If you purchase a paid plan, payment is processed by our third-party payment processor (Stripe). We do not store full credit card numbers. We retain transaction records, subscription status, and billing history. • Device Information: Device identifiers, push notification tokens (for mobile apps), and camera/photo library access (only when you explicitly grant permission for backup features). • Communications: Support emails and messages you send to us.

We use your information to:

• Provide, maintain, and improve the Service • Process payments and manage subscriptions • Send transactional emails (account verification, password reset, billing receipts) • Respond to support requests • Monitor and analyze usage patterns to improve performance and security • Detect, investigate, and prevent fraudulent or unauthorized activity • Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Your files are encrypted using AES-256 encryption at rest and protected in transit using TLS 1.2 or higher. Our infrastructure is hosted on Supabase (AWS US East) and Cloudflare R2, both of which maintain SOC 2 Type II certifications.

While we implement industry-standard security measures, NO METHOD OF TRANSMISSION OVER THE INTERNET OR METHOD OF ELECTRONIC STORAGE IS 100% SECURE. We cannot guarantee absolute security of your data. You acknowledge and accept this risk by using the Service.

You are responsible for maintaining the confidentiality of your account credentials. We are not responsible for any loss or damage arising from unauthorized access to your account resulting from your failure to protect your credentials.

VIRTUALDRIVE IS NOT A BACKUP SERVICE. While we take reasonable steps to maintain the reliability and integrity of the Service, we do not guarantee that your files will be preserved indefinitely or protected against all possible loss scenarios including, but not limited to: hardware failure, software bugs, data corruption, accidental deletion, cyberattacks, or service discontinuation.

YOU ARE SOLELY RESPONSIBLE FOR MAINTAINING YOUR OWN BACKUPS OF YOUR FILES. We strongly recommend that you maintain independent copies of any files stored on VirtualDrive. We shall not be liable for any loss of data, regardless of cause.

We retain your personal data and files for as long as your account remains active. If you delete your account, your data will be permanently deleted within 30 days, except where we are required to retain it for legal or compliance purposes (such as financial records, which may be retained for up to 7 years per applicable law). Deleted files moved to Trash are permanently removed after 30 days unless manually restored or permanently deleted sooner.

We use the following third-party service providers, each with their own privacy policies:

• Supabase (database and authentication) — supabase.com/privacy • Cloudflare (file storage, CDN, and infrastructure) — cloudflare.com/privacypolicy • Stripe (payment processing) — stripe.com/privacy

These providers are bound by contractual data processing agreements. We only share data necessary for them to provide their services to us.

We use only essential cookies required for authentication and session management. We do not use advertising, analytics, or tracking cookies. We do not participate in cross-site tracking. Our mobile applications do not use tracking SDKs or share data with advertising networks.

The Service is not directed to children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children under these ages. If we become aware that we have collected personal information from a child without verifiable parental consent, we will delete that information promptly. If you believe we may have information from or about a child, please contact us at privacy@virtualdrive.us.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you. • Correction: Request correction of inaccurate or incomplete data. • Deletion: Request deletion of your personal data and account. • Portability: Request your data in a machine-readable format. • Objection: Object to certain types of processing. • Restriction: Request restriction of processing in certain circumstances.

To exercise any of these rights, contact us at privacy@virtualdrive.us. We will respond within 30 days. We may require identity verification before processing requests.

California residents have additional rights under the California Consumer Privacy Act (CCPA). You have the right to know what personal information we collect, disclose, and sell (we do not sell personal information). You have the right to request deletion of your personal information. You have the right to opt out of the sale of personal information (not applicable — we do not sell data). You have the right to non-discrimination for exercising your privacy rights. To submit a CCPA request, contact privacy@virtualdrive.us.

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, our legal bases for processing your personal data are: (a) Performance of contract — to provide the Service you signed up for; (b) Legitimate interests — to maintain security, prevent fraud, and improve the Service; (c) Legal obligation — to comply with applicable laws; (d) Consent — where you have explicitly provided consent.

You may lodge a complaint with your local data protection authority if you believe we have processed your data in violation of applicable law. Our EU representative can be reached at privacy@virtualdrive.us.

Your data may be transferred to and processed in the United States and other countries where our service providers operate. Where required by law, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Our iOS and Android applications may request the following device permissions:

• Camera / Photo Library: Only for the optional camera backup feature. Accessed only when you explicitly enable this feature. • Push Notifications: To send alerts about uploads, shares, and account activity. Optional and revocable at any time in device settings. • Network Access: Required to sync files and communicate with our servers.

We do not access any permission beyond what you explicitly grant. You may revoke permissions at any time through your device settings.

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting a notice in the Service. The updated policy will be effective upon posting. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.

For privacy-related questions, requests, or concerns:

Email: privacy@virtualdrive.us Website: virtualdrive.us

For data deletion requests, email privacy@virtualdrive.us with subject line "Data Deletion Request" and include your registered email address.