1. How long does Dropbox keep my files after I delete my account?
When you delete your Dropbox Basic, Plus, Family, or Professional account, we will initiate deletion of the files you store on our Services after 30 days. If you’re a user on a Dropbox Business Team, only your admin can disable your account and delete your files.
2. What are Dropbox’s lawful bases for processing my data?
Dropbox processes your data (1) to provide the Dropbox Services to you pursuant to our contract with you; (2) in furtherance of its legitimate interests in operating our Services and business; and (3) with your consent. In some cases, Dropbox may process your data to comply with applicable law, legal process, or regulation; protect any person from death or serious bodily injury; or to carry out a task in the public interest.
Examples of Dropbox processing your data to provide you with the Dropbox Services include:
- Providing, updating, maintaining, and protecting our Services and business. For example, we host your files, back them up, and share them when you ask us to. We also analyze how you use the Services to help you prioritize your content and stay on top of your most important work.
- Troubleshooting issues you may encounter with the Dropbox Services. If you contact us with questions or concerns about the Services, we may use your personal information to respond.
- Billing, account management, and administrative purposes. If you sign up for a trial or purchase a paid Dropbox plan, we may collect and process payment information, including your name, credit or debit card information, billing address, and details of your transaction history.
- Sending you emails and other communications. We may contact you about important changes to our Services and Service-related notices. These communications are considered part of the Dropbox Services and you may not opt out of them.
Examples of Dropbox processing your data in furtherance of its legitimate interests in operating our Services and business include:
- Understanding how you use our Services and improving them.
- Promoting Dropbox Services that are most relevant to your interests.
- Investigating and preventing security issues and abuse of the Dropbox Services or Dropbox users.
Examples of Dropbox processing your data with your consent include:
- Sending you marketing materials about our Services. If you do not wish to receive these materials, simply click the Unsubscribe link in any email, or update your preferences in the Notifications section of your Dropbox account.
- Connecting your Dropbox account with other third party services via Dropbox APIs.
- Collecting feedback from you to improve our Services and develop new features.
3. How does Dropbox collect and use my usage information?
We collect information about how you use the Services, including actions you take in your Dropbox account, to efficiently and reliably provide the Dropbox Services. We also use such information to improve our Services and develop new features, protect Dropbox users, and, in some instances, promote the Dropbox Services. For example, to provide the Dropbox Service and help you prioritize your work, we analyze your usage activity to recommend content that you might find most relevant and important. To improve our Services, we collect information about how you interact with our Services to understand what features are most useful to you and improve them. To protect Dropbox users, we analyze things like IP addresses, login history, and email and password changes to detect and respond to abusive behavior. To promote Dropbox Services, we will, in some instances, analyze information about users’ activity and level of engagement with our Services—such as how many devices they’ve connected to their Dropbox account and how much storage space they’ve used—to identify users who may be interested in our premium services.
4. How does Dropbox use my personal information for machine learning and algorithmic analysis?
Dropbox collects and processes your personal data using algorithmic analysis or machine learning technologies to provide, improve, protect, and promote the Dropbox Services:
Provide Dropbox Services. We use machine learning technology to make it easier for you to find, retrieve, organize, and prioritize Your Stuff, collaborate with those you work with most, and stay focused on your most important work. For example, we analyze your account activity and usage history to suggest content in your Dropbox account that you might find most relevant, predict and auto-correct search queries to help you find what you’re looking for, and troubleshoot issues you may be experiencing with the Dropbox Services.
Protect Dropbox Services. We use algorithmic analysis on things like your IP address, login history, and account changes (such as email address and password changes) to detect and respond to abusive behavior and content on our Services.
Improve Dropbox Services. Dropbox uses algorithmic analysis and machine learning to improve the Dropbox Services and develop new features. For instance, we analyze information about how you interact with the Services to optimize the design of our user interface, improve the way our algorithms suggest and personalize content, refine the relevance of search results to help you find what you’re looking for, and develop new ways to streamline your workflow.
Promote Dropbox Services. We will, in some instances, use algorithmic analysis to identify users’ activity and level of engagement with our Services by looking at things like how many devices they’ve connected to their Dropbox account, how much storage space they’ve used, and how many sharing actions they’ve taken to identify users who might be interested in learning more about our premium Services.
5. What trusted third parties does Dropbox share my personal information with?
In order to provide, improve, protect, and promote our Services, Dropbox shares your personal information with trusted third parties, as well as other Dropbox Companies.
Trusted third parties are companies or individuals that Dropbox engages to provide, improve, protect, and promote Dropbox Services. For example, trusted third parties may access your information to provide data storage services, IT services, or customer support services, but will only do so to perform tasks on Dropbox’s behalf. Dropbox remains responsible for the handling of your information per our instructions. Trusted third parties include:
- Dropbox, Inc.
- Amazon Web Services, Inc.
- Teleperformance A.E.
- Salesforce.com, LLC
- Serenova, LLC (formerly LiveOps Cloud Platform, LLC)
- Google LLC
- Zendesk, Inc.
- Oracle America, Inc.
6. Who are the Dropbox Companies and what are Dropbox Company Services?
In addition to the services offered by Dropbox, Dropbox owns and operates each of the companies listed below, in accordance with their respective terms of service and privacy policies. Together with Dropbox, these companies are the Dropbox Companies. Dropbox shares infrastructure, systems, and technology with other Dropbox Companies, and will share your information within our family of companies to provide, improve, protect, and promote Dropbox Company Services. Dropbox Company Services are the Dropbox Services and other products and services provided by the Dropbox Companies that are subject to separate, standalone terms of service and privacy policies.
- JN PROJECTS Inc., d.b.a. HelloSign (https://www.hellosign.com/privacy)
- DocSend, Inc. (https://www.docsend.com/privacy-policy/)
7. How do I request deletion of, or object to or limit the use of, my personal data?
You can request that we stop, limit our use of, or delete your personal data in certain circumstances—for example, if we have no lawful basis to keep using your data, or if you think your personal data is inaccurate.
You can also choose to receive marketing messages from us. You can select which kinds of marketing messages you want to receive at any time by editing your preferences in the Notifications section of your personal account or by clicking the Unsubscribe link in any categories of emails you no longer want to receive.
If you believe that Dropbox has no lawful basis for using your personal data, believe there are other inaccuracies in your personal data, or wish to object to the use of your personal data or request deletion of your personal data, please let us know by contacting us at email@example.com and we’ll look into it. We will not discriminate against you for exercising any of these rights.
8. How can I access my personal data?
You can access the files you save in your Dropbox account at any time. If you have the Dropbox desktop app installed, you can store all of your files directly on your computer.
For information about your account and hardware associated with your account, simply sign in to your account page. Here you can find the name and email address associated with your account, as well as the IP addresses of connected sessions and computers and mobile devices used to access your account. You can also see apps connected to your account from the security page.
If you’ve been in touch with the Dropbox support team, you can sign in to our customer service portal and get a record of your communications with us.
If you would like to submit a data access request, please write us at firstname.lastname@example.org with the words “Data Access Request” in the subject or body of your message, and we will get back to you promptly.
You can download your files from your Dropbox account at any time. There are a number of ways to do so.
If you use the Dropbox desktop app, you can move a Dropbox folder to another location on your hard drive or to an external hard drive.
If you use dropbox.com to access your account, you can easily download individual files or folders from dropbox.com. To download individual files from dropbox.com:
- Sign in to dropbox.com.
- Find the file you want to download.
- Click the "…" (ellipsis) to the right of the file’s name.
- Click Download.
You can also download entire folders into a ZIP file from dropbox.com (note that there are limits on how large the folder can be).
If you use the Dropbox mobile app, you can download individual files onto your device to view offline.
If you use Dropbox Paper, you can export your Paper documents from dropbox.com.
10. What categories of personal information are included in the information Dropbox collects and discloses to trusted third parties?
“Account information” means information about your account. This includes your identifying information, which could be your real name, alias, unique personal identifier, or online identifier, and it could also include other personal information like your postal address, Internet Protocol address, email address, account name, profile picture or other similar identifiers. “Account information” could also include commercial information, such as your purchasing or consuming history or tendencies.
“Your stuff” is what you decide to store in your Dropbox account.
“Contacts” includes identifying information about contacts that you’ve chosen to give us access to. It can also include identifiers such as a real name, alias, or email address.
“Usage information” includes information relating to your use of the Services. Because Dropbox provides online services, this may include internet or other electronic network activity information, such as information regarding your interaction with websites, applications, or advertisements.
“Device information” refers to information about the particular devices you use to access the Services, which may include Usage information or device-specific information, such as an online identifier or Internet Protocol address, or geolocation data.
“Cookies and other technologies” refers to technologies like cookies and pixel tags. These technologies can lead to the collection of online identifiers, Internet Protocol address, or other similar identifiers, as well as Usage information.
Dropbox has collected and disclosed the categories described above to trusted third parties in the preceding 12 months.
11. How many personal data requests does Dropbox get, and how does Dropbox respond to them?
Dropbox has a team of specialists dedicated to responding to personal data requests received via email@example.com from users all over the world. You can find information on the volume of personal data requests Dropbox received and processed in the 12 months preceding June 30, 2021 in the table below:
|Type of request||Received||Complied with (in whole or in part)||Denied (due to failure to verify or no account)||Average response time|
|Objection to processing||76||76||0||0.88 days|
|Do not sell||2||Dropbox does not sell personal data||Dropbox does not sell personal data||0.46 days|