Privacy Policy

Transcend Technologies, Inc., a Delaware corporation doing business as "VirtualDrive" ("VirtualDrive," "we," "us," or "our"), is the controller of personal information processed in connection with the Service. Our principal place of business is 300 Delaware Ave, Suite 210 #426, Wilmington, DE 19801, USA. Transcend Technologies, Inc. also operates other brands including SupaCode and iSocialize; this Policy applies only to data processed under the VirtualDrive brand. You can contact us at support@virtualdrive.us or by phone at +1 (917) 438-7005.

a. Information you give us

• Account data: name, email address, password (stored as a salted hash), and optionally your profile photo.
• Subscription & payment data: billing name, postal address, and the last four digits of your payment method. Full card numbers and bank details are handled directly by our payment processors (Stripe and PayPal) and never reach our servers.
• User Content: files, folders, tags, notes, comments, shared-link settings, and other content you upload, sync, or share.
• Communications: messages you send to support, including any attachments and the email address you reply from.
• Optional inputs: survey responses, feedback, beta program enrollment, and similar items.
• Terms acceptance: the version of the Terms of Service you accepted, when, and on which platform (web, Android, or iOS).
• Content reports: if you report content (with or without an account), the reason, your description, the optional name and email address you give us, and the IP address and browser information of the request, which we use to review the report, prevent abuse of the reporting system, and meet legal obligations.

b. Information collected automatically

• Device & connection data: device model, OS version, app version, language, IP address, approximate location derived from IP, and crash diagnostics.
• Service usage: events like sign-in, upload, download, share-link creation, and feature interactions, used for security and product analytics.
• File metadata: file names, sizes, MIME types, modification times, storage path, sharing relationships, and tags. We do not scan or read the contents of your files for advertising or for any purpose other than to operate, secure, and improve the Service (e.g., to deliver previews, detect malware, respond to legal process, comply with CSAM-reporting obligations, or block identical copies of content we have previously removed for violating our Terms by comparing file fingerprints (cryptographic hashes) against a blocklist).
• Cookies and similar technologies: see Section 9.

c. Information from third parties

• Single sign-on: if you sign in with Google or Apple, we receive your name, email, and a unique provider identifier from that provider.
• App Store / Google Play: we may receive a tokenized purchase identifier and entitlement status to apply your subscription. Apple and Google do not share your payment information with us.

We use personal information to:

• Provide, maintain, and improve the Service, including authentication, storage routing, syncing, and sharing;
• Process subscriptions, billing, and refunds, and send transactional emails (e.g., receipts, password resets, security alerts);
• Provide customer support and respond to inquiries;
• Detect, prevent, and investigate fraud, abuse, security incidents, and policy or legal violations, including the detection and reporting of child sexual abuse material (CSAM) as required by 18 U.S.C. §2258A;
• Comply with legal obligations, respond to lawful requests from public authorities, and enforce our Terms;
• Conduct product and service analytics, performance monitoring, and feature development;
• Communicate optional product updates and marketing — only where allowed and subject to your opt-out at any time.

We do not use your files or their contents to train artificial-intelligence or machine-learning models, and we do not allow our service providers to do so.

For users in the European Economic Area, the United Kingdom, and Switzerland, we rely on the following legal bases under the GDPR / UK GDPR:

• Performance of a contract — to operate the Service for you;
• Legitimate interests — to keep the Service secure, prevent abuse, and improve features (we balance these against your rights);
• Compliance with a legal obligation — e.g., tax, accounting, and CSAM-reporting laws;
• Consent — for optional marketing, certain cookies, and (where required) sensitive processing. You may withdraw consent at any time.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only in the following limited circumstances:

• Service providers / sub-processors (see Section 6) who process data on our behalf under contractual confidentiality and security obligations;
• Recipients you choose — anyone with whom you share a file, link, workspace invitation, or comment;
• Compliance & safety — to authorities or third parties when required by law, subpoena, or to protect rights, property, or safety;
• Corporate transactions — in connection with a merger, acquisition, financing, or sale of assets, with notice to affected users where required;
• Aggregated or de-identified data that cannot reasonably be used to identify you.

We use the following sub-processors to operate the Service:

We may add or replace sub-processors as the Service evolves. Material changes will be reflected in an updated version of this Policy.

We are based in the United States, and our sub-processors may operate globally. Where we transfer personal information out of the EEA, United Kingdom, or Switzerland, we rely on appropriate safeguards including the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, the Swiss-US Data Privacy Framework where applicable, and supplementary measures (e.g., encryption in transit and at rest, access controls, transparency reporting).

How to delete your account: you can do this yourself from inside the app on either platform — no support email required. On iOS, open the app → Settings → Account → Delete Account and re-enter your password to confirm. On the web, sign in at virtualdrive.us/app → your avatar → Account → Delete account and type your email to confirm.

• Account & User Content: retained while your account is active. After deletion, content is removed from active systems within 30 days and from backups within 90 additional days, except where longer retention is required by law.
• Billing records: retained for at least 7 years to comply with tax and accounting obligations.
• Security logs (sign-in IPs, audit events): typically retained 12 months.
• Contact-form submissions: retained up to 24 months after resolution.
• Content reports & moderation records (including warnings issued and actions taken): retained up to 24 months after resolution, or longer where needed to enforce our Terms against repeat violators or required by law.
• CSAM reports: preserved as required by 18 U.S.C. §2258A (currently at least 1 year after we report to NCMEC).

We use first-party cookies and similar storage to keep you signed in, remember preferences (theme, language), prevent fraud, and measure how features perform. To measure how the website and web app are used we use Google Analytics, which sets first-party analytics cookies. In the European Economic Area, the United Kingdom and Switzerland, analytics cookies are only set after you accept them in our cookie banner; elsewhere they are on by default, and choosing "Decline" in the banner turns them off. We do not use advertising cookies, and our Android and iOS apps do not use analytics or tracking SDKs. You can also control cookies through your browser; some features may not work without them.

We use technical and organizational measures designed to protect your information, including TLS 1.2+ in transit, AES-256 encryption at rest, password hashing (Argon2/bcrypt), least-privilege access controls, row-level security on the database, multi-factor authentication for staff with production access, audit logging, and regular dependency scanning. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security. We will notify affected users of a personal-data breach as required by applicable law.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy in a portable format;
• Rectify inaccurate or incomplete information;
• Erase your personal information (subject to legal retention obligations);
• Restrict or object to certain processing, including direct marketing;
• Withdraw consent where processing is based on consent;
• Not be subject to solely automated decisions with legal or similarly significant effects;
• Lodge a complaint with your local data-protection authority. EU/UK residents may also contact our representative through the email below.

Most rights can be exercised directly in your account settings (export, delete, manage email preferences). You can also email support@virtualdrive.us with your request; we may need to verify your identity. We will respond within the period required by applicable law (typically 30–45 days).

California, Colorado, Connecticut, Utah, Virginia, and similar U.S. state privacy laws give residents specific rights, including the right to know, delete, correct, and (in some states) appeal a denial. We do not "sell" or "share" personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA, and we do not knowingly process the personal information of minors under 16 for any sale or sharing. To exercise rights, email support@virtualdrive.us. You may use an authorized agent; we may require verification.

The Service is not directed to children under 13 (or under the higher minimum age set by local law). We do not knowingly collect personal information from such children. If you believe a child has provided us personal information, please contact support@virtualdrive.us and we will delete it.

For transparency with App Store and Play Store reviewers and users, the following data categories are collected and linked to your identity. None are used for tracking across third-party apps or websites:

• Contact info: name, email — for account, support, and transactional communication;
• User content: files and photos you upload, plus profile photo — for app functionality;
• Identifiers: user ID, device ID — for authentication, security, and fraud prevention;
• Usage data: product interaction — for analytics and app functionality;
• Diagnostics: crash data, performance data — to keep the app working.

We honor Global Privacy Control (GPC) signals for users in jurisdictions where recognition is legally required. Most browsers do not provide a uniform "Do Not Track" signal, so we do not separately respond to those.

We may update this Privacy Policy from time to time. We will post the new version here with a revised "Last updated" date, and where changes are material, we will notify you by email or in-product notice.

For privacy questions, complaints, or to exercise your rights, contact our Data Protection point of contact at:

Transcend Technologies, Inc. (DBA "VirtualDrive") Attn: Privacy 300 Delaware Ave, Suite 210 #426 Wilmington, DE 19801, USA

Phone: +1 (917) 438-7005 Email: support@virtualdrive.us Corporate: support@transcendtechnologysolutions.com Web: virtualdrive.us/contact