Privacy Policy
This Privacy Policy explains how Enzonic LLC, a Kentucky limited liability company ("Enzonic", "we", "us"), collects, uses, stores, and shares information when you use Enzonic Drive (the "Service"). We believe privacy is a feature, not a setting. The short version: we collect what we need to run the Service, we don't sell personal data, and we never scan your files for advertising.
1. Information We Collect
Account information
When you sign in, our authentication provider (Clerk) gives us your user identifier, email address, and display name. You may optionally provide a profile picture.
File content and metadata
Files you upload to the Service, together with metadata such as filename, size, MIME type, upload time, folder path, version history, and extracted OCR text, are stored so the Service can function. File bytes are stored in third-party object storage providers; metadata is stored in Google Firebase (Firestore and Realtime Database).
Usage and diagnostic data
We collect technical logs (IP address, user-agent, timestamps, and error traces) to operate and secure the Service. We keep these logs for as long as reasonably necessary for security, fraud prevention, and debugging.
Cookies and similar technologies
We use a small number of strictly necessary cookies and local-storage entries to keep you signed in and remember your theme. See our Cookie Policy for details.
2. How We Use Information
- To provide, maintain, and improve the Service.
- To authenticate you and keep your account secure.
- To enable file sharing, collaboration, and search (including OCR).
- To enforce our Terms of Service and Acceptable Use Policy.
- To comply with legal obligations and respond to lawful requests.
- To communicate with you about the Service.
We do not sell your personal information. We do not use the content of your files to train machine-learning models or to serve advertising.
3. Sharing of Information
We share information only as described below:
- Service providers. We use Clerk (authentication), Google Firebase (metadata database, realtime sync, hosting), and an S3-compatible object storage provider (file storage). These providers process data on our behalf under contractual safeguards.
- People you share with. When you create a share link, any person who obtains that link can access the file subject to the permissions you set.
- Legal process. We may disclose information to comply with valid legal process or to protect rights, safety, or property. Where permitted, we will attempt to notify you first.
- Business transfers. If Enzonic is involved in a merger, acquisition, or sale of assets, information may be transferred; we will require the recipient to honor this Policy.
4. Security
Files are encrypted in transit using TLS 1.3 and at rest using AES-256. Access to share links is scoped to individual files and bound to signed, revocable tokens. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable steps to protect information and promptly investigate suspected incidents.
5. Data Retention
We retain Your Content for as long as your account is active or as needed to provide the Service. When you delete a file, we move it to Trash and remove it from active storage after a grace period. When you delete your account, we delete Your Content within a reasonable period, except where retention is required for legal or security reasons.
6. Your Rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise any of these rights, contact us at [email protected]. We will respond within the time required by applicable law.
California residents: you have additional rights under the CCPA/CPRA, including the right to know what personal information we collect, the right to delete, the right to correct, and the right to limit use of sensitive personal information. We do not sell or share personal information as those terms are defined by California law.
7. Children
The Service is not directed to children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.
8. International Transfers
We are based in the United States and store and process data in the United States. If you access the Service from outside the U.S., you understand that your information may be transferred to, stored, and processed in the U.S.
9. Changes
We may update this Policy from time to time. We will post the updated version here and, if changes are material, notify you by email or in the Service.
10. Contact
Enzonic LLC
Kentucky, United States
[email protected]