1. Global Compliance (GDPR & Beyond)
DriveBundle is committed to high standards of data protection and privacy. We ensure that all personal data is handled in accordance with the General Data Protection Regulation (GDPR) for our European users, as well as other global privacy frameworks. Our system architecture is built on the principle of "Data Protection by Design and by Default."
2. Data Controller & Processor Roles
DriveBundle acts as the primary data processor for the information you provide through Google OAuth and the operations you perform on your Google Drive files.
Data Controller
The user remains the owner and controller of their Google Drive data. You decide what we process.
Data Processor
DriveBundle processes data strictly based on your instructions and to provide the requested service.
3. Marketplace Data
Marketplace Disclosure
The term "Etsy" is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.
Where Etsy-connected workflows are enabled by a seller, DriveBundle acts as a service provider to that seller and processes Etsy-related personal data only to deliver the requested workflow. This includes seller-authorized delivery verification, listing preparation, and order-linked fulfillment records.
4. Purposes of Processing
- User Authentication: Secure sign-in via Google OAuth.
- Drive Management: Facilitating file bundling, previews (3D/Archive), and folder management as explicitly triggered by you.
- Seller Operations: Delivery preparation, order-linked access logs, and optional marketplace-connected workflows.
- Service Improvements: Aggregated, non-personally identifiable usage stats to optimize system performance.
- Subscription Management: Processing payments and managing tier-based quotas.
5. Processed Personal Data
We collect and process the minimum amount of data required to operate the platform:
- Identity: Name, email address, and profile picture (via Google).
- Metadata: Structural information of selected Google Drive folders (file names, sizes, IDs).
- Marketplace Metadata: Seller-authorized order identifiers, listing drafts, or buyer verification data where Etsy-connected features are enabled.
- Technical: IP addresses and browser fingerprints strictly for security and anti-abuse monitoring.
Important: DriveBundle does NOT store or process the raw content of your private files on its own infrastructure.
6. Your Privacy Rights
Under GDPR, CCPA, and similar laws, you have specific rights regarding your personal data:
DriveBundle does not sell personal information and does not share personal information for cross-context behavioral advertising.
Right to Access
Obtain a copy of the data we hold about you.
Right to Rectification
Correct inaccurate or incomplete data.
Right to Erasure
Request full deletion of your account and metadata (Workspace Reset).
Right to Revoke Access
Revoke our Google API permissions via your Google Account at any time.
Right to Know / Delete
California residents may request disclosure or deletion of covered personal information we retain.
7. Security Measures
We safeguard your data using industry-standard technical measures:
- SSL/TLS Encryption: All data in transit is encrypted using secure protocols.
- OAuth 2.0: We use token-based authentication. We never see or store your Google password.
- Infrastructure: We partner with leading cloud providers (AWS/Vercel) with high-level physical and network security.
8. Data Retention
We retain your data only for as long as necessary to fulfill the purposes outlined in this policy. When you delete your account or perform a "Workspace Reset," associated operational metadata is deleted from our primary databases within 30 days, except where longer retention is legally required for billing, fraud prevention, or dispute resolution.
9. Cookies & Preferences
We use cookies for authentication, workspace continuity, referral attribution, and payment security. See our Cookie Policy for more detail.
10. Contact Information
For data protection inquiries or to exercise your rights, please contact our Data Protection Office at:
Privacy: privacy@drivebundle.com
Support: support@drivebundle.com