Privacy policy

This policy explains what information DriveFlow collects, how we use it and the choices you have. It covers the DriveFlow app for Windows and the website www.driveflow.casa. In this policy, “DriveFlow”, “we” and “us” mean the team that publishes DriveFlow. Questions go to contact@driveflow.casa.

In short

• Your files go directly between your computer and Google Drive. They never pass through or get stored on DriveFlow servers.
• Our servers keep only what’s needed to run your DriveFlow account: your Google account ID, name, email, profile picture, activation status and the computers you’ve signed in on.
• We don’t sell data, show ads or use your data to train AI models.

Information we collect

When you sign in to DriveFlow

You sign in to the website and the app with Google. Google shares your basic profile with us: your Google account ID, name, email address and profile picture. We use your Google account ID to recognize your account and your email to contact you about it.

Account and device information

• Your DriveFlow activation status and license code.
• For each computer where you sign in to the app: the computer name, Windows version, DriveFlow version, a random installation ID created by the app, and when the computer was last active.
• Sign-in records: date and time, IP address and, on the website, browser type. We use these to keep your account secure.

Cookies and local storage

The website uses only the cookies it needs to work: a session cookie that keeps you signed in, a cookie that tells pages you’re signed in, and a short-lived cookie that protects the Google sign-in step. Your language choice is saved in your browser’s local storage. We don’t use advertising or analytics cookies.

How the DriveFlow app uses Google user data

To transfer files, the DriveFlow app asks for access to the Google accounts you connect. You choose which accounts to connect, and Google shows you exactly what access is requested before you agree.

• Google Drive (https://www.googleapis.com/auth/drive): to list files and folders in My Drive, shared drives and Shared with me; show your storage usage; upload the files and folders you choose; download files and export Google Docs, Sheets and Slides to Office formats; create folders, rename, copy, move to trash or delete the items you select; download files from Drive links you paste; and create an “anyone with the link can view” link when you choose Share.
• Apps Script projects, read-only (https://www.googleapis.com/auth/script.projects.readonly): to read the content of Apps Script projects whose links you add, so you can save them.
• Basic profile (openid, email, profile): to show which Google account each connection belongs to.

The app acts only when you ask it to, such as when you start a transfer, open a folder or delete a file. All of this happens on your computer:

• File contents, file names and folder structures from your Google Drive are never sent to DriveFlow servers.
• The access granted by Google is stored only on your computer, encrypted with Windows data protection for your Windows user account.
• No person at DriveFlow can see your Google Drive data.
• We don’t use Google user data for advertising, don’t sell it, and don’t use it to develop or train AI or machine-learning models.

DriveFlow’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

• Sign you in to the website and the app, and activate DriveFlow.
• Show and manage the computers signed in to your account, and apply the limit on the number of computers.
• Protect accounts, for example by detecting unusual sign-ins or misuse.
• Answer your support requests.
• Tell you about important changes to DriveFlow or this policy.

The app also checks a version file on the internet to tell you when an update is available. That request doesn’t include your account or file information.

Sharing

We don’t sell or rent personal information. We share it only:

• With the hosting provider that runs our servers and stores account data on our behalf.
• When required by law, or to protect the safety and rights of our users and DriveFlow.

How long we keep information

• Account, activation and device information: for as long as your account exists.
• Expired and signed-out sessions: deleted automatically, usually within 90 days.
• When you ask us to delete your account, we delete your account, license and device records within 30 days.

Your choices

• See and sign out computers: on your account page.
• Disconnect a Google account from the app: use Disconnect in DriveFlow. This deletes the stored access from your computer.
• Remove DriveFlow’s access to Google: at any time at myaccount.google.com/permissions.
• Remove app data from your computer: uninstall DriveFlow and delete the folder %LOCALAPPDATA%\DriveFlow.
• Get a copy of your data or delete your account: email contact@driveflow.casa from the email address of your account.

Security

The website and API use HTTPS. Sign-in tokens are stored on our servers only in hashed form, access to account data is limited to authorized administrators, and administrative actions are logged. No method of storing or sending data is completely secure, but we work to protect your information and will notify you if a breach affects your account.

Children

DriveFlow isn’t intended for children under 13, or under the minimum age required to consent to data processing in your country. We don’t knowingly collect their information.

Changes to this policy

If we make significant changes, we’ll announce them on the website and in the app before they take effect. The date at the top shows when this policy last changed.

Contact

Email contact@driveflow.casa with any question about privacy or your data.