Your privacy.
Our responsibility.

We collect only the information necessary to provide and improve StorageStack:

• Google Account Information — the name, email address, and profile picture Google shares with us when you sign in.
• Google Drive Data — file and folder metadata (names, sizes, types, modified dates) from accounts you connect, and file content only transiently, while a migration you requested is in progress.
• Support Information — anything you send us via the contact form or email, such as your name, email, and message.

We do not currently operate any analytics or crash-reporting tooling in the app. If that changes, this policy will be updated first.

• To provide core features — viewing, organizing, and migrating your Google Drive files.
• To authenticate your accounts securely via Google OAuth.
• To respond to support requests and communicate important updates.
• To detect, prevent, and address abuse of the service.

We do not use your data for advertising, and we never sell your data.

When you connect a Google account, we request only the OAuth scopes required to power the features you use — primarily Google Drive. We do not access Gmail content or Google Photos unless those integrations are released to you and you explicitly grant that permission. You can review or revoke any permission at any time from your Google Account's Security settings.

We never ask for, see, or store your Google account password. Authentication happens entirely through Google's own sign-in flow.

We do not sell your information. We share it only where necessary to operate the service — for example, with Google's own APIs to read or write the files you ask us to manage — or where required by law.

StorageStack has no general-purpose application database. Your Drive data lives in Google's systems; our app talks to Google's APIs directly using your OAuth tokens. On mobile, tokens are stored in your device's secure, encrypted keychain storage. All network traffic is encrypted in transit (TLS).

We retain account and support information only as long as necessary to provide our services or as required by law. Migration data is transient and is not retained once a migration completes.

You can disconnect any Google account, delete your StorageStack account, or request deletion of your data at any time. See our Account Deletion and Data Deletion pages for details.

We rely on Google's APIs (Sign-In, Drive) to provide our core functionality. Google's own privacy policy governs how Google itself handles your data.

StorageStack is not intended for children under 13, and we do not knowingly collect information from them.

Our infrastructure and Google's own infrastructure may process data in countries other than your own. We take reasonable steps to protect your information wherever it is processed.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date.

Questions about this policy? Reach us at support@storagestack.app, or see our Contact page.