Privacy Policy
Effective October 2, 2026 ยท Version 2026-10-02.1
Who operates AllDrive
AllDrive is operated by Felipe Gabriel Teixeira Estrela. For support, privacy requests, account deletion or security reports, contact [email protected].
Information we process
We process your name, email, account status, password hash, connected-account identifiers and profile pictures; encrypted Google OAuth tokens and provider credentials; file and folder metadata such as names, sizes, types and dates; sharing permissions; API-key hashes; session information including IP address and browser details; activity records and the version and time of your acceptance of these documents.
Files and Google access
Files remain in the Google Drive or S3 storage you connect. AllDrive may transmit file contents through its server for uploads, previews and downloads. Google access currently includes the broad Drive scope needed to import, list and manage your existing files, plus email and profile scopes. Connecting an account is optional and requires separate authorization with Google. We do not receive your Google password.
Purposes and legal bases
We use information to provide the features you request, authenticate accounts, manage storage, operate sharing, respond to support requests and protect the service. Processing necessary to provide the service is based on performance of the service agreement; security processing may rely on legitimate interests with safeguards; legal obligations may require retention. Optional provider access is separately authorized and can be revoked. Acknowledging this notice is not blanket consent for unrelated processing.
Google data and Limited Use
Information received from Google APIs is used only to provide the storage features you request. It is not sold, used for advertising, or used to train generalized AI models. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Human access is limited to cases permitted by that policy, including your explicit authorization for support, security investigations or legal obligations.
Sharing and service providers
Google or your S3 provider processes connected storage data. Our hosting provider processes the application database and transmitted content; Cloudflare provides DNS, HTTPS proxying and network protection. Browser requests may also reach Gravatar for account avatars and CDN providers for preview-player assets, disclosing network information such as IP address. If enabled, Google reCAPTCHA processes information for abuse prevention. Public shares and CDN links expose the selected content to anyone with the link until revoked; email invitations grant access to the designated recipient.
Cookies and local storage
Essential session cookies keep you signed in. Browser storage and preference cookies remember theme, display size and account filters. These are used for authentication and requested preferences. AllDrive does not use them for advertising. Clearing browser storage may reset preferences or end your session.
Security and international processing
We use HTTPS, password hashing, encrypted provider tokens and authorization checks. Administrators can manage users and application configuration; this panel does not provide a user-file browser. Providers may process data outside Brazil. Transfers must use applicable legal safeguards. No online service can guarantee absolute security. Report suspected incidents through the contact above.
Retention and deletion
Account data and connected-provider metadata are retained while needed to provide your account. Revoked credentials, expired sessions, logs and backups may remain for security, recovery or legal obligations until removed under the applicable retention process. There is currently no guaranteed automated purge schedule. To close your account or request deletion, contact support. Account deactivation is not deletion. Removing AllDrive data does not automatically delete files in your original storage.
Your choices and rights
You may request confirmation, access, correction, portability where applicable, information about sharing, and deletion or restriction as provided by Brazilian law. You may revoke Google authorization at myaccount.google.com/permissions and disconnect providers in Settings. Requests are handled without charge, subject to identity verification and applicable legal exceptions. You may also contact the ANPD.
Changes and eligible users
The service is intended for adults aged 18 or older. Material changes require review of a new document version before continued authenticated use. This notice is version 2026-10-02.1.