Privacy Policy

2. Information we collect

• Account and billing information: name, email address, phone number, profile image, organization and workspace details, subscription status, and transaction records. Payment processors handle full payment-card details; we generally receive only limited billing information.
• Your content: files, folders, filenames, shared content, messages, and other material you upload, import, create, or direct us to process.
• File and photo information: size, type, dates, EXIF and location metadata, thumbnails, extracted document or media metadata, and search indexes. If photo organization features are used, we may create numerical face representations and face groups to organize photos within your workspace.
• Connected-service information: provider type, account identifiers, encrypted access credentials or tokens, bucket or folder configuration, connection status, and data needed to transfer files to and from storage you choose.
• Usage and device information: IP address, browser and device details, login and security events, approximate location derived from IP, feature activity, API and webhook activity, cookies, session identifiers, crash information, and logs.
• Communications: support requests, feedback, copyright notices, and other messages you send us.

We collect information from you, your organization or workspace administrator, your device, your use of the Service, and providers you connect at your direction.

3. How we use information

We use information to provide, authenticate, operate, maintain, bill, secure, troubleshoot, and improve the Service; store and transfer content; generate previews and search results; organize photos; enable sharing, collaboration, APIs, and connected storage; communicate service, security, billing, and support messages; prevent fraud and abuse; enforce our Terms; comply with law; and protect users, Bodek, and others.

Face representations and groups are used only to provide photo-organization features within the relevant workspace. We do not use them to identify people outside that workspace, for advertising, or to build facial-recognition profiles for sale. They are retained while the related photos and feature remain active and are deleted when the related photos or account are permanently deleted, subject to temporary backups and legal obligations. If you upload photos of other people or enable these features, you are responsible for providing any notice and obtaining any consent required by law.

4. Google user data

If you connect Google Drive or use Google Sign-In, we access only the account and file information authorized through the permissions you grant. We use Google user data to authenticate you, display connection information, and store, retrieve, migrate, or organize files as you direct. We do not use Google user data for advertising and do not allow humans to read it except with your affirmative permission for support or security, when necessary to comply with law, or when data is aggregated and anonymized for internal operations.

Bodek Files' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You may revoke Google access through your Bodek Files storage settings or Google account settings.

5. How we disclose information

We may disclose information:

• to hosting, email, authentication, payment, security, analytics, and other vendors that process it for us under appropriate restrictions;
• to storage providers and other services you connect or direct us to use;
• to people you invite, share with, or give a public link, and to workspace owners or administrators who control that workspace;
• when we reasonably believe disclosure is required by law or needed to protect rights, safety, security, or the integrity of the Service; and
• in connection with a merger, financing, acquisition, bankruptcy, or sale of assets, subject to applicable law.

We do not sell personal information or share it for cross-context behavioral advertising. We may use or disclose aggregated or de-identified information that cannot reasonably identify you.

6. Retention and deletion

We retain information while needed to provide the Service and for legitimate business, security, fraud-prevention, dispute, and legal purposes. After you cancel or we terminate your subscription or account, normal access ends and we retain available files for a 60-day ZIP-export period. After that period, we may delete the account and remaining content. Deleted data may remain temporarily in backups or logs until overwritten, and some records may be retained longer where required by law.

Content stored with a third-party provider remains subject to that provider's retention and deletion practices. Disconnecting a provider does not necessarily delete data from that provider, and deleting data there may make it unavailable through Bodek Files.

7. Your choices and privacy rights

You can review or change account details and workspace settings, manage sharing links and members, disconnect storage providers, revoke API keys, download content, and request account deletion through the Service. Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, or to appeal a denied privacy request. We may verify your identity and may retain information when legally permitted.

Use browser controls to manage cookies, although blocking required cookies may prevent sign-in or other features. Transactional and security messages are necessary for the Service; you can manage optional communications where settings are offered.

8. Security and international processing

We use administrative, technical, and organizational safeguards designed to protect information, including access controls and encryption of certain connected-storage credentials. No system or transmission is completely secure, and we cannot guarantee against loss, misuse, or unauthorized access. You are responsible for strong authentication, secure sharing settings, and independent backups.

Bodek is based in the United States. Information may be processed in the United States and other locations where we or our providers operate, subject to applicable law.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Users must be at least 18 years old to create an account. If you believe a child provided information, contact us so we can investigate and delete it where required.

10. Changes to this Policy

We may update this Policy as the Service or law changes. We will post the revised Policy with a new date and provide reasonable notice of material changes. Your continued use after the effective date is subject to the updated Policy.

11. Contact us

For privacy questions or requests, email privacy@bodek.us. For copyright complaints, email dmca@bodek.us.