Privacy Policy

1. Who is responsible for your data

The operator of the InfiniDrive service is responsible for personal data processed to run the service. The operator's verified legal identity is stated on checkout and billing documents, and is provided on request through [email protected].

When an organization uses InfiniDrive to store personal data of its own users or clients, the organization acts as controller of that content and InfiniDrive processes it on the organization's behalf under the Data Processing Agreement.

2. What we process

InfiniDrive collects only what is needed to operate accounts, storage, billing, security, and support:

• Account data — email address, display name, chosen language, plan, and authentication identifiers.
• Your content — files, folders, sharing settings, file versions, and deleted-item records that you store in the service.
• Operational data — IP addresses, device and browser details, timestamps, request identifiers, and security event logs.
• Billing data — subscription state and limited payment metadata received from Stripe. InfiniDrive never stores full card numbers.
• Support data — messages and diagnostic details you choose to send us.

3. Why we process it

Processing serves a small set of purposes: providing and securing the storage service you signed up for, handling subscriptions and taxes, preventing abuse, answering support requests, meeting legal obligations, and keeping the platform reliable. Depending on the context, the legal basis is performance of a contract, a legitimate interest in security and operations, your consent, or a legal obligation.

InfiniDrive does not sell personal data and does not read or analyze the contents of your files for advertising.

4. Cookies and local storage

This marketing site sets no advertising or analytics cookies. The product itself uses strictly necessary session data to keep you signed in and to protect your account.

5. Your rights

Subject to applicable law, you can request access to your data, correction, deletion, restriction of processing, or a portable copy, and you can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it at any time. You may also lodge a complaint with your data-protection authority.

• Send requests from your account email to [email protected].
• We may verify your identity before releasing or deleting data.
• We respond within the timeframes required by applicable law.

6. Retention and account deletion

Your content is retained for as long as your account is active. When a paid subscription ends, the account returns to the free tier; if stored data exceeds the free capacity, you keep download access for a documented grace period before limits are enforced.

A verified account deletion request starts a controlled process: access is disabled, stored content is scheduled for removal from active systems, and completion is recorded. Security logs are kept only for an operationally necessary period. Billing and tax records may be retained longer where law requires. The concrete timeline for an individual deletion is confirmed when you submit the request.

Limitation: RAID redundancy is an availability control, not a backup. After a confirmed permanent deletion completes, content cannot be restored.

7. Providers and international transfers

InfiniDrive relies on a deliberately short list of providers for infrastructure, network delivery, and payments; each provider and its role is published on the Subprocessors page. Primary storage stays in Europe. Where a provider may process limited data outside the EEA, a recognized transfer mechanism is used where required.

8. Contact

For any privacy question or request, write to [email protected]. General support is available at [email protected].