Privacy Policy

01Who we are

bkpdrive is a cloud file-storage service. For the purposes of data-protection law, bkpdrive is the controller of the personal information described in this Policy. You can reach us about privacy at [email protected].

02Information we collect

• Account information. When you sign in with Google, we receive and store a Google account identifier, your email address, your display name, and your profile picture URL.
• Your files. The files and folders you upload, together with related metadata such as file names, sizes, types, and upload and modification times.
• Account & usage data. Information needed to run your account, such as your storage usage and allowance, your preferences (for example, an advertising flag), and — if you take part in a referral or earn-storage program — the referral relationship between accounts (who invited whom) and an invite code.
• Technical & log data. Information automatically generated when you use the Service, such as IP address (and approximate location derived from it), device and browser information, and request logs used to operate and secure the Service.

We do not intentionally collect special categories of personal data, and you should not store such data with us unless you accept responsibility for it under our Terms.

03How we use information

We use the information to:

• provide, maintain, and improve the Service — store your files and let you access, organize, and download them;
• authenticate you, operate your account, and enforce storage allowances and limits;
• run optional features such as referral or earn-storage programs;
• protect the Service and our users — security, fraud and abuse prevention, and troubleshooting;
• communicate with you about your account, security, or important changes;
• show sponsored content you choose to watch and credit the free upload it earns (see §7); and
• comply with legal obligations and enforce our Terms.

04Legal bases (where applicable)

Where data-protection laws such as the GDPR apply, we process personal information on these bases: performance of a contract (to provide the Service you request); legitimate interests (to operate, secure, and improve the Service and prevent abuse, balanced against your rights); consent (where we ask for it, for example for certain optional features — which you can withdraw); and legal obligation (to comply with the law).

05Your files

Your files are transmitted over secure (HTTPS) connections and stored using our infrastructure and trusted third-party cloud storage providers that we use to operate the Service. To provide the Service, your files are processed automatically (for example, prepared for storage and returned to you on download). We do not sell your files, we do not use the contents of your files to show you advertising, and we do not access their contents except as necessary to operate or secure the Service, to enforce our Terms, or to comply with the law.

Teams. If you belong to a team, the files in that team belong to the team. The team owner can see every file in the team, including every restricted folder, and members of a team can see each other's display names, email addresses and profile pictures. Other members see a restricted folder only if they are on its list.

06Service providers

We share information with trusted third parties that help us run the Service — for example, Google for sign-in, and cloud infrastructure and storage providers that host, transmit, and store data on our behalf. These providers may process personal information only as needed to provide their services to us and under appropriate confidentiality and data-protection obligations. We do not sell your personal information, and we do not share it with third parties for their own marketing.

07Advertising

bkpdrive includes a free allowance that may be supported in part by sponsored content. You can choose to watch sponsored content in exchange for a free upload allowance (see below), and accounts that have not purchased a plan may see a piece of sponsored content when they return to the app after a while away; you can close it after 5 seconds. Some sponsored content is played with YouTube's embedded player in its privacy-enhanced mode; when that player loads, Google processes information under its own privacy policy. We do not use advertising networks to target you, we do not use cross-site tracking cookies, we do not build an advertising profile from the contents of your files, and we do not sell your personal information. For sponsored content shown when you return to the app, we record only daily totals per item (how many times it was shown, closed, or clicked), not who saw it.

Sponsored content for free upload. If we offer a way to earn a free upload allowance by watching sponsored content (see our Terms §9), we record, for each account, which sponsored items were viewed and clicked, along with the IP address they were viewed from. We use these records to credit rewards and to prevent abuse. IP addresses are kept for 90 days; the viewing records themselves stay with your account so that your free upload allowance for the day can be calculated. Sponsors receive only aggregate counts, never information about individual accounts. Sponsored content is delivered by bkpdrive itself, without third-party ad scripts or tracking; if you follow a sponsor's link, that site's own policies apply.

08Cookies & local storage

We use your browser's local storage to keep you signed in — for example, a refresh token and, if you arrived via a referral, a referral code. These are necessary for the Service to function. We do not use advertising or third-party tracking cookies. When YouTube's embedded player loads, it may store information in your browser under Google's policies. Clearing your browser storage signs you out and removes these values.

09Data retention

We keep your files until you permanently delete them. Deleted files are moved to the trash; once 30 days have passed since deletion, they move to the archive automatically. Files in the trash and in the archive are kept until you permanently delete them. Permanently deleting a file removes it from your account, and it can no longer be retrieved. We keep account information while your account is active. After you close your account, we keep the account record, including the email address it used, to handle refunds and purchase records, prevent abuse, and meet legal obligations; it is not used to contact you about anything else. When you close your account, you immediately and permanently lose access to the account and everything in it, including your files, and we will not restore it. If you later sign in again with the same email address or Google account, a brand-new, empty account is created; it does not include anything from the closed account. Technical logs are retained only as long as needed to operate and secure the Service.

10Your rights & choices

• Access & export. You can view and download your files, including files in the trash, at any time from the web app or CLI. Files in the archive currently cannot be downloaded (see §9).
• Delete. You can permanently delete individual files, or close your account to permanently give up access to it and all of its data.
• Data-protection rights. Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. To exercise them, contact us at [email protected]. You also have the right to lodge a complaint with your local data-protection authority.
• California residents. We do not sell or "share" personal information as those terms are defined under California law, and we will not discriminate against you for exercising your rights.

11Security

We protect your information with reasonable technical and organizational measures, including secure (HTTPS) transport and access controls, and if we ever become aware of a breach affecting your personal data we will notify you and the authorities where required by law. As with any online service, no method of transmission or storage can be completely secure, so we can't promise absolute security — but keeping your information safe is something we take seriously.

To be clear about the limits: bkpdrive does not yet provide end-to-end encryption. Because we have to process your files to operate the Service, we are technically able to access their contents (we only do so as described in §5). For that reason — as with any cloud service — we recommend also keeping your own copy of your most critical files. We are a small, independent service and have not yet obtained third-party security certifications such as SOC 2 or ISO 27001 (see §13 if your use depends on them).

12Children

The Service is not directed to children under 13 (or the minimum age of digital consent in your country, if higher), and we do not knowingly collect their personal information. If you believe a child has provided us personal information, contact us and we will delete it.

13Data location, transfers & compliance

bkpdrive is operated from Taiwan. Your information is processed and stored on globally distributed cloud infrastructure and trusted third-party providers, which may process and store data in countries other than your own, where data-protection laws may differ from those in your jurisdiction. Because we rely on globally distributed infrastructure, we cannot guarantee that your data is kept within any particular country or region; where required, we take steps to ensure appropriate safeguards for international transfers.

We are a small, independent service and have not yet obtained formal compliance certifications (such as SOC 2 or ISO 27001), nor do we offer data-residency commitments or signed data-processing agreements. If your use depends on those guarantees, bkpdrive may not be the right fit today. You can reach us with compliance questions at [email protected].

14Changes to this policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect means you accept the revised Policy.

This Policy is provided in Chinese and English; both language versions are equally authentic.

15Contact

Questions about your privacy or this Policy, or want to exercise your rights? Contact us at [email protected].