FluidCloud

Legal

Privacy Policy

What personal data we collect, how we use it, the providers we rely on, and the rights you have over your data.

Effective date: August 6, 2026

1. Scope

FluidCloud (“FluidCloud”, “we”, “us”) operates the FluidCloud service at cloud.fluidvip.com (the “Service”). This policy applies to personal data processed when you use the Service or visit our website. FluidCloud shares one account system with the other Fluidvip services, so your account data is common to them; the files you store here are specific to this Service.

2. Data we collect

  • Account data: your email address, authentication identifiers from our identity provider, and the date of birth you give when creating an account (used to confirm you meet our minimum age).
  • Files you upload: the files themselves and their metadata — name, size, type, folder/Space, upload time — plus any thumbnails or previews we generate. Media files often carry embedded data such as capture time, camera model and, if you have not disabled it, GPS location; we store files as you provide them.
  • Sharing data: share and drop links you create, including their tokens, expiry and access counts.
  • Team data: invitations you send and the membership and permissions of your team.
  • Usage & billing data: your token balance and usage ledger, storage and transfer volumes, and (where paid billing applies) payment information handled by our payment processor.
  • Technical data: IP address, device and browser information, and server logs.

3. How we use data

To provide, operate and secure the Service; to store and deliver your files and the links to them; to meter and bill usage; to provide customer support; to improve and develop features; and to comply with legal obligations.

4. Legal bases (where the GDPR applies)

Performance of a contract (providing the Service); our legitimate interests (securing and improving the Service); consent (where required); and compliance with legal obligations.

5. What we do not do with your files

We do not sell your personal data. We do not use the files you upload to train models, and we do not share them with anyone other than the providers listed below acting on our behalf to run the Service — except where you have made a file public yourself with a share or drop link.

6. Service providers / processors

We share personal data only as necessary with providers acting on our behalf under appropriate agreements, including: our authentication and database provider (self-hosted Supabase, running on our infrastructure); Cloudflare (R2 object storage, network and DNS); our hosting and deployment infrastructure; and our email provider. If you choose to import from Google Drive using the file picker, we access the files you select on your behalf, using the permission you grant at that moment.

7. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service, after which we delete or anonymise it within a reasonable period, unless a longer retention period is required by law. Files remain in your account until you delete them or your account is closed. Deleting a file revokes the links that pointed to it. You may request deletion (see Your rights).

8. Your rights

Depending on your location, you may have the right to access, correct, delete, export (portability), restrict, or object to processing of your personal data, and to withdraw consent. To exercise these rights, contact [email protected]. You may also lodge a complaint with your local data-protection authority.

9. Security

We use industry-standard safeguards, including encryption in transit and access controls. Note that a share or drop link you create is deliberately accessible to anyone holding it. No system is completely secure, and we cannot guarantee absolute security.

10. International transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.

11. Children

The Service is not directed to children. You must be at least 18 years old to create an account, and we do not knowingly collect personal data from anyone under that age. If you believe someone under 18 has provided us personal data, contact us and we will delete it.

12. Cookies

We use essential cookies for authentication and session management and may use limited analytics cookies. A cookie banner or preferences control will be added where legally required.

13. Changes

We may update this policy from time to time; we will notify you of material changes in-product or by email and update the effective date.

Questions: [email protected]