Privacy Policy

FluidCloud (“FluidCloud”, “we”, “us”) operates the FluidCloud service at cloud.fluidvip.com (the “Service”). This policy applies to personal data processed when you use the Service or visit our website. FluidCloud shares one account system with the other Fluidvip services, so your account data is common to them; the files you store here are specific to this Service.

• Account data: your email address, authentication identifiers from our identity provider, and the date of birth you give when creating an account (used to confirm you meet our minimum age).
• Files you upload: the files themselves and their metadata — name, size, type, folder/Space, upload time — plus any thumbnails or previews we generate. Media files often carry embedded data such as capture time, camera model and, if you have not disabled it, GPS location; we store files as you provide them.
• Sharing data: share and drop links you create, including their tokens, expiry and access counts.
• Team data: invitations you send and the membership and permissions of your team.
• Usage & billing data: your token balance and usage ledger, storage and transfer volumes, and, when you make a payment, payment information handled by our payment providers. When you pay by card, you enter your card details on a payment page hosted by our billing platform; we never receive or store your full card number.
• Technical data: IP address, device and browser information, and server logs.

To provide, operate and secure the Service; to store and deliver your files and the links to them; to meter and bill usage; to provide customer support; to improve and develop features; and to comply with legal obligations.

Performance of a contract (providing the Service); our legitimate interests (securing and improving the Service); consent (where required); and compliance with legal obligations.

We do not sell your personal data. We do not use the files you upload to train models, and we do not share them with anyone other than the providers listed below acting on our behalf to run the Service — except where you have made a file public yourself with a share or drop link.

We share personal data only as necessary with providers acting on our behalf under appropriate agreements, including: our authentication and database provider (self-hosted Supabase, running on our infrastructure); Cloudflare (R2 object storage, network and DNS); our hosting and deployment infrastructure; our email provider; an analytics provider, used only after you accept analytics cookies (Google Analytics, provided by Google); a billing platform that runs card checkout and subscriptions (Chargebee); a card payment processor (Stripe); and a payment processor that handles cryptocurrency payments. If you choose to import from Google Drive using the file picker, we access the files you select on your behalf, using the permission you grant at that moment.

We retain personal data for as long as your account is active or as needed to provide the Service, after which we delete or anonymise it within a reasonable period, unless a longer retention period is required by law. Files remain in your account until you delete them or your account is closed. Deleting a file revokes the links that pointed to it. You may request deletion (see Your rights).

Depending on your location, you may have the right to access, correct, delete, export (portability), restrict, or object to processing of your personal data, and to withdraw consent. To exercise these rights, contact [email protected]. You may also lodge a complaint with your local data-protection authority.

We use industry-standard safeguards, including encryption in transit and access controls. Note that a share or drop link you create is deliberately accessible to anyone holding it. No system is completely secure, and we cannot guarantee absolute security.

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.

The Service is not directed to children. You must be at least 18 years old to create an account, and we do not knowingly collect personal data from anyone under that age. If you believe someone under 18 has provided us personal data, contact us and we will delete it.

We use essential cookies for authentication and session management. We also use Google Analytics to understand how the Service is used, but only if you accept analytics cookies.

When no choice is saved in your browser (for example, on your first visit), a cookie banner asks you to accept or reject analytics cookies. Until you accept, Google Analytics is not loaded at all and sets no cookies. If you accept, it is loaded with Google’s advertising consent signals (ad storage, ad user data and ad personalisation) set to denied, and it sets cookies whose names begin with “_ga”. If you reject, it is not loaded, and any “_ga” cookies set for cloud.fluidvip.com or fluidvip.com are deleted.

We save your choice, and the time you made it, in your browser’s local storage (under “fluid.cookieConsent”), not in a cookie. If your browser blocks local storage, the choice cannot be saved and the banner asks again on your next visit. Each Fluid website keeps its own choice, so another Fluid site may ask you again. You can change your choice at any time with the “Cookie settings” control at the bottom of this page, which reopens the banner. If you withdraw consent, the “_ga” cookies are deleted, Google Analytics is told at once to stop using analytics cookies, and it is not loaded on later visits.

We may update this policy from time to time; we will notify you of material changes in-product or by email and update the effective date.