Privacy Policy

What we collect

We collect the minimum needed to run the service: your email address (for sign-in, verification and essential notices), country, and basic usage data such as registration time, sign-in days and online duration. Drafts in the Studio are stored in your browser, not on our servers, until you choose to save them to an account.

Uploaded files are stored so you can use them across devices. File type and size are verified and uploads are scanned for malware.

What we never do

We never log passwords, full tokens, keys or recovery links. Passwords are hashed with Argon2id. Private files, messages and enterprise content are never indexed by search engines and are never visible to enterprise administrators.

Retention and deletion

Account and permission metadata is kept while your account lives and deleted or anonymized within 30 days of closure, unless law, an open refund or an ownership transfer requires otherwise. Recycle-bin files purge after 7 days (free) or 30 days (paid). Security and sharing audit logs are retained 180 days (90 for screen-sharing access logs) and contain no content bodies.

Where law requires longer retention, the longer period wins.

Your rights

You can access, correct, export and delete your data. Email changes require a second verification and notify both the old and new addresses; a recycled email address never inherits an account. Contact support for any privacy request.