Privacy Policy

1. Introduction

Welcome to Cloud Combo. We are committed to protecting your privacy and being transparent about how our service works. Cloud Combo operates as a middleware service that connects your device to your cloud storage providers. We do not host, store, or retain any of your files on our servers.

This Privacy Policy explains how we collect, use, and protect your information when you use our service.

2. How Our Service Works

Cloud Combo acts as an intermediary between your device and your cloud storage providers (Google Drive, Dropbox, pCloud, OneDrive). Our service facilitates direct transfers between these providers without storing your files on our infrastructure.

3. Information We Collect

3.1 Account Information

When you create an account, we collect:

• Email address
• Full name
• Password (encrypted and securely hashed)

3.2 Cloud Storage Authentication

When you connect your cloud storage accounts, we use OAuth 2.0 authentication to obtain access tokens. These tokens allow us to perform operations on your behalf without ever knowing your cloud provider passwords.

We store:

• OAuth access tokens (encrypted)
• OAuth refresh tokens (encrypted)
• Cloud provider account identifiers
• Token expiration times

3.3 Usage Information

To provide and improve our service, we collect:

• Transfer history and status
• File names and sizes (for transfer operations only)
• Folder structures (for browsing and organizing transfers)
• Transfer progress and error logs
• Service usage statistics (bandwidth, number of transfers)

3.4 Technical Information

• IP address
• Browser type and version
• Device information
• Log data and error reports

4. How We Use Your Information

We use the collected information to:

• Provide and maintain our middleware service
• Authenticate you with your cloud storage providers
• Process and monitor file transfers between providers
• Send you service-related notifications
• Troubleshoot technical issues and errors
• Improve and optimize our service performance
• Ensure security and prevent fraudulent activity
• Comply with legal obligations

5. Data Security

We implement industry-standard security measures to protect your information:

• OAuth 2.0 tokens are encrypted at rest in our database
• Passwords are hashed using bcrypt with salt
• All connections use HTTPS/TLS encryption
• Access to user data is restricted to essential operations only
• Regular security audits and updates

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information as follows:

• Account Information: Retained until you delete your account
• OAuth Tokens: Retained until you disconnect a cloud provider or delete your account
• Transfer History: Retained for 90 days or until you delete your account
• Usage Statistics: Aggregated data may be retained indefinitely for analytics
• Your Files: Never retained; files are only temporarily processed during active transfers

7. Third-Party Services

Cloud Combo integrates with third-party cloud storage providers. When you connect your accounts, you are subject to those providers' privacy policies and terms of service:

• Google Drive: Google Privacy Policy
• Dropbox: Dropbox Privacy Policy
• pCloud: pCloud Privacy Policy
• OneDrive: Microsoft Privacy Statement

We are not responsible for the privacy practices of these third-party services.

8. Your Rights

You have the right to:

• Access: Request a copy of your personal information
• Correction: Update or correct your account information
• Deletion: Delete your account and associated data
• Disconnect: Remove connected cloud storage accounts at any time
• Opt-out: Unsubscribe from promotional emails (service emails may still be sent)
• Data Portability: Export your transfer history data

9. Cookies and Tracking

We use cookies and similar technologies to maintain your session and improve user experience:

• Essential Cookies: Required for authentication and service functionality
• Analytics: To understand how users interact with our service

10. Children's Privacy

Cloud Combo is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: