Privacy Policy

Last Updated: April 20, 2026

Introduction

BriteDriveTM ("we," "our," or "us") is operated by Directive Technology, Inc. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our file collection service.

By using BriteDriveTM, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

Information We Collect

1. Account Information

When you create an account, we collect:

  • Your user ID
  • Email address
  • Name (if provided)
  • Profile image URL (if provided)

2. Google Account Integration

When you connect your Google account via OAuth, we collect and store:

  • Google email address
  • OAuth access and refresh tokens (encrypted)
  • Token expiration timestamps
  • Granted permission scopes (Google Drive and Gmail access)

Important: We only request access to files that BriteDriveTM creates or uploads to your Google Drive. We do not access any other files in your Google Drive.

3. File and Upload Information

We collect metadata about files uploaded through your links:

  • File names and sizes
  • Upload timestamps
  • Uploader names (provided by guest users)
  • Google Drive file and folder IDs
  • Link usage statistics (views, upload counts)

Note: Actual file contents are stored directly in your personal Google Drive account, not on our servers.

4. Usage and Analytics Data

We automatically collect:

  • Upload link views and access patterns
  • Feature usage statistics
  • Error logs and diagnostic information
  • Session data for authentication purposes
How We Use Your Information

We use the collected information for the following purposes:

  • Service Delivery: To provide, maintain, and improve BriteDriveTM functionality
  • File Management: To upload files to your Google Drive and organize them according to your preferences
  • Email Notifications: To send you upload notifications and weekly summary reports via Gmail (if enabled in your settings)
  • Analytics: To display upload statistics and link performance data in your dashboard
  • Authentication: To verify your identity and maintain secure sessions
  • Support: To respond to your inquiries and provide customer assistance
  • Security: To detect, prevent, and address technical issues and abuse
How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

Third-Party Service Providers

  • Google Drive: Files are uploaded directly to your personal Google Drive account
  • Gmail: Email notifications are sent via your connected Gmail account
  • Neon: Database hosting for application data

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders or government agencies).

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Google API Services User Data Policy

BriteDriveTM's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • We only use Google user data to provide and improve user-facing features that are prominent in BriteDrive's interface.
  • We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger, acquisition, or sale of assets.
  • We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
  • We do not allow humans to read Google user data unless we have your affirmative agreement for specific messages, doing so is necessary for security purposes (such as investigating abuse), to comply with applicable law, or for our internal operations and even then only when the data has been aggregated and anonymized.
  • We do not use Google user data to train, develop, or improve generalized or non-personalized AI or machine-learning models.

Scopes We Request

  • https://www.googleapis.com/auth/drive.file — Allows BriteDrive to create and manage only the files and folders that BriteDrive itself creates or that you explicitly select via the Google Picker. We cannot see any other files in your Drive.
  • https://www.googleapis.com/auth/gmail.send — Allows BriteDrive to send notification emails on your behalf when uploads are received. We do not read, modify, or delete any messages in your Gmail.
  • openid, email, profile — Standard sign-in scopes used only to identify your account.
Data Security

We implement industry-standard security measures to protect your personal information:

  • HTTPS encryption for all data transmission
  • Secure session management with encrypted cookies
  • OAuth 2.0 for Google account authentication
  • Database encryption at rest
  • Regular security audits and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Your Privacy Rights

You have the following rights regarding your personal information:

Access and Export

You can access and export all your data through the Settings page using the "Export Data" feature, which provides a comprehensive JSON file of your account information.

Correction and Update

You can update your account preferences, notification settings, and Google account connection at any time through the Settings page.

Deletion

You can request deletion of your account and all associated data through the "Delete Account" option in Settings. This will:

  • Remove all your base folders, upload links, and metadata
  • Delete all analytics and usage data
  • Revoke Google OAuth tokens
  • Permanently delete your account

Note: Files already uploaded to your Google Drive will not be deleted automatically. You must manage those files directly in your Google Drive account.

Opt-Out of Communications

You can disable email notifications at any time through your notification preferences in Settings.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to:

  • Comply with legal obligations
  • Resolve disputes
  • Enforce our agreements
  • Maintain service integrity

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

Cookies and Tracking

We use session cookies for authentication purposes. These cookies are essential for the service to function and are automatically deleted when you log out or your session expires.

We do not use third-party tracking cookies or advertising networks.

Children's Privacy

BriteDriveTM is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using BriteDriveTM, you consent to the transfer of your information to the United States and other countries where our service providers operate.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Directive Technology, Inc.

Email: privacy@britedrive.com

Website: britedrive.com