Privacy Policy

1. Definitions

• Account Holder: A person or organization that creates or manages a SendToDrive account or upload page.
• Uploader: A person who submits files or information through a SendToDrive upload page.
• Personal Data: Information that identifies or can reasonably be linked to an identifiable person, such as name, email address, IP address, or account data.
• User Content: Files, form responses, upload page content, branding, text, and related materials submitted through or configured in the Services.
• Processing: Any operation performed on data, such as collection, storage, transfer, use, disclosure, deletion, or analysis.
• Controller: Craterix Software LLC, where we determine how and why Personal Data is processed. In some cases, Account Holders may act as independent controllers for information they collect from Uploaders.

2. Information We Collect

Information You Provide

• name, email address, and account profile information;
• authentication information and login-related identifiers;
• upload page settings, page titles, descriptions, form fields, and branding choices;
• support messages, refund requests, feedback, survey responses, and communications;
• billing contact details and transaction-related information.

Information From Upload Pages

• files submitted by Uploaders to an Account Holder's connected Google Drive;
• limited file metadata, such as file name, file size, upload timestamp, and status;
• form responses or text fields configured by the Account Holder;
• Google Sheets sync records, when enabled by the Account Holder, such as upload ID, uploader name and email, file name, file size, Google Drive file link, upload timestamp, notes, and configured form responses;
• technical data associated with the upload, such as IP address and browser data.

SendToDrive is designed so uploaded files are transferred to the connected Google Drive account rather than stored as permanent file copies on our servers. Temporary processing, transmission, logs, metadata, or error-handling data may occur as needed to operate, secure, and troubleshoot the Services.

Information Collected Automatically

• IP address, device identifiers, browser type, operating system, and language;
• pages viewed, referring URLs, interactions, session events, and approximate location;
• cookies, local storage, and similar technologies used for authentication and analytics;
• security, diagnostic, performance, and error logs.

3. Google Account, Drive, and Sheets Data

When you connect a Google account, we use Google OAuth and Google APIs to provide the Services. This may include access tokens, refresh tokens, selected Google Drive folder information, account identifiers, and permissions needed to transfer submitted files to your Google Drive.

If you enable Google Sheets sync, we use Google Sheets APIs to create a spreadsheet you request or append upload records to the spreadsheet and sheet tab you select. This may include spreadsheet IDs, sheet names, spreadsheet names, selected columns, upload metadata, file links, notes, and form responses configured on your upload page.

We use Google data only to provide and improve user-facing SendToDrive features, maintain security, troubleshoot issues, comply with law, and perform actions you authorize. We do not use Google data for advertising, and we do not sell Google user data.

Our use and transfer of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Workspace API data to develop, improve, or train generalized AI or machine learning models, and we do not transfer that data to third-party AI services for model training.

You can revoke SendToDrive's Google access through your Google account settings. If you revoke access, features that depend on Google Drive may stop working until you reconnect your account.

4. How We Use Information

• provide, operate, maintain, and improve SendToDrive;
• create and manage accounts, upload pages, and Google Drive connections;
• process file submissions and related metadata;
• sync upload records to Google Sheets when an Account Holder enables that integration;
• process payments, subscriptions, invoices, cancellations, and refunds;
• send service, security, billing, account, and support communications;
• detect, prevent, and investigate abuse, fraud, spam, and security incidents;
• monitor performance, debug errors, analyze usage, and improve user experience;
• comply with legal obligations and enforce our Terms of Service.

We do not sell or rent your Personal Data.

5. Legal Bases for Processing

Where privacy laws require a legal basis for processing, we rely on one or more of the following:

• Contractual necessity: to provide the Services you request.
• Consent: where you connect Google Drive, enable optional features, or otherwise give permission.
• Legitimate interests: to secure, maintain, analyze, prevent abuse, and improve the Services.
• Legal obligations: to comply with applicable laws, tax rules, accounting obligations, and lawful requests.

6. How We Share Information

We share information only as needed to operate SendToDrive, comply with law, protect rights, or complete business transactions. This may include sharing information with:

• Google: OAuth, Google Drive APIs, Google Sheets APIs, file transfer, spreadsheet sync, and related Google account functionality.
• Amazon Web Services: hosting, storage, databases, logs, and infrastructure.
• Paddle: payment processing, merchant of record services, subscription management, tax, fraud screening, and billing support.
• Analytics and diagnostics providers: aggregate usage, product performance, and error analysis.
• Email and support providers: transactional email, customer support, and service communications.
• Legal, safety, and compliance parties: when required by law, legal process, or to protect SendToDrive, users, Uploaders, or others.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets.

7. Payments

Paid plans may be processed by Paddle. Paddle may collect and process payment card information, billing details, tax information, transaction data, and fraud-prevention data according to its own terms and privacy policy. We do not store full payment card numbers on our systems.

8. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies for authentication, account sessions, security, preferences, analytics, and product performance. You can manage cookies through your browser settings, but disabling certain cookies may prevent parts of SendToDrive from working properly.

9. Data Retention

We retain Personal Data only for as long as reasonably necessary to provide the Services, maintain security, resolve disputes, comply with legal obligations, enforce agreements, and support legitimate business needs.

Account data is generally retained while your account is active. Billing, tax, security, and compliance records may be retained longer where required or permitted by law. Upload metadata and logs may be retained for operational, troubleshooting, abuse-prevention, and audit purposes.

If Google Sheets sync is enabled, records written to a Google Sheet remain in the Account Holder's Google account according to that account's own settings and the Account Holder's choices. Disabling the integration stops future syncs but does not automatically delete rows already written to the selected spreadsheet.

10. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. No online service can guarantee absolute security.

You are responsible for protecting your account credentials, Google account, upload page links, and Google Drive permissions. If you believe your account or upload page has been compromised, contact us promptly.

11. International Data Transfers

We may process and store information in the United States and other countries where we or our service providers operate. These countries may have data protection laws different from those in your location. Where required, we use appropriate safeguards for international transfers, such as contractual protections.

12. Your Privacy Rights

Depending on your location, you may have rights to access, correct, update, export, delete, restrict, or object to certain processing of your Personal Data. You may also have the right to withdraw consent where processing is based on consent and to lodge a complaint with a data protection authority.

To make a privacy request, contact us at hello@sendtodrive.com. We may need to verify your identity before fulfilling your request. If you are an Uploader, some requests may need to be directed to the Account Holder who collected your information through their upload page.

13. Children's Privacy

SendToDrive is not directed to children under 13, and we do not knowingly collect Personal Data from children under 13. If you believe a child has provided Personal Data to us, contact us and we will take appropriate steps to delete it.

14. Data Breach Notification

If we become aware of a security incident involving Personal Data that requires notice, we will notify affected users and regulators as required by applicable law.

15. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as posting the updated Policy on this page or sending notice to the email associated with your account. The updated Policy will become effective when posted unless a later effective date is stated.

16. Contact

Craterix Software LLC
Email: hello@sendtodrive.com