Privacy
This page says what information DROP keeps about you, why, for how long and who sees it. It's written on the basis of the laws of the Islamic Republic of Iran, in particular the Electronic Commerce Act and the Computer Crimes Act.
Version 1 · in force from [effective date]
In plain words
- Your files are yours. Nobody at DROP opens them, except at your request or on a judicial order.
- We ask only for what DROP can't work without: your mobile number and name.
- Your files and account details are on servers inside Iran.
- To improve how DROP works for you, we use cookies and a few analytics tools to see how it's used. Your files' contents never reach these tools.
- We show no ads in DROP and sell your information to no one.
- Whenever you like, you can download all your files at once and close your account.
This summary doesn't replace the full text.
1. What we keep
DROP keeps the data the service needs to work or the law requires it to keep, and the usage information we use to improve DROP.
| Data | What for | How long |
|---|---|---|
| Mobile number | Sign-in by texted code, finding you when someone invites you, reminders that your plan is ending | While the account is open, and 6 months after closing it |
| First and last name | Showing to people you share files with | Same as the mobile number |
| Files and their names | Keeping, showing and syncing them on your devices | Until you delete them (section 3) |
| Signed-in devices | Device and browser type, IP address and sign-in time, so you can see where you're signed in and sign any of them out | Until you sign out of that device, and 6 months after |
| Payments | Amount, date, plan and bank tracking number, for invoices and follow-up | As long as tax law requires |
| Usage information | Pages you open, clicks and pointer movement, device and browser type and approximate city, to find the places in DROP where things are hard (section 4) | As long as each tool keeps it, and no more than 14 months |
| Server logs | IP address, time and type of request, to prevent abuse and fix errors | 6 months |
We never see your bank card number. Payment happens on the Shaparak page and only the result comes back to DROP.
We don't ask you for sensitive data, meaning anything about religion, ethnicity, health, or physical or moral characteristics. Keeping such data without explicit consent is forbidden under Article 58 of the Electronic Commerce Act.
2. Your files
No one who works at DROP looks at the contents of your files. DROP's software reads a file only for the job you asked for, for example:
- making thumbnails of photos and videos to show in your file list;
- reading the cover and artist from a song file;
- opening a document, spreadsheet or presentation in DROP Office, which runs on DROP's own servers and doesn't send the file anywhere else.
We don't use your files for advertising, sales, profiling you or training AI.
If you ask support for help and we need to see a file, we ask your permission first and open only that file.
3. How long we keep it
A file you delete goes to the Trash first and can come back from there. Once you delete it from the Trash too, neither you nor the people you shared it with can find it.
Article 761 of the Islamic Penal Code (the discretionary punishments part, which contains the Computer Crimes Act) requires domestic hosting providers to keep stored content for 15 days and user information for 6 months after an account ends. So:
- A file you delete for good stays on the server for another 15 days and is then deleted. During that time no one but a judicial authority can reach it.
- Your mobile number and name stay for 6 months after you close your account, and are then deleted.
If your plan or the free trial ends and you don't renew, your files are deleted following the steps on the pricing page: read-only three days later, closed six days later, deleted on day twenty.
4. Who sees it
Files are private by default. People see them only if you invited them or they have the public link. People you invite see your name next to the file.
DROP doesn't sell or rent out your information. Only these two services receive anything from you, and only what their job needs:
- SMS service [service name]: your mobile number, to send sign-in codes and reminders;
- Payment gateway [gateway name]: the amount and order number, for payment through Shaparak.
Analytics tools
To understand which parts of DROP are useful and where things are hard, we use a few analytics tools on the site and the DROP web app. They record which pages open, where people click and how far down a page they scroll. We also use this information to measure DROP's own advertising.
We don't give these tools the contents of your files, your name or your mobile number, and file names are hidden before anything is recorded. They know you by a random ID kept in a cookie, not by your DROP account.
Where the data is
Files, account details and payments are on servers inside Iran and don't leave the country. The usage information the analytics tools record may be kept on servers outside Iran.
5. Requests from the authorities
We give your information or files to others only on the written order of a competent judicial authority. If a judicial authority or the Committee for Determining Instances of Criminal Content orders it, we close access to the file or its public link under Article 751 of the Islamic Penal Code.
Unless the law forbids us, we tell you inside DROP what was requested.
6. Cookies
DROP has two kinds of cookies:
- DROP's own cookies: one keeps you signed in and another remembers whether you chose the dark or light theme. DROP doesn't work without them.
- Analytics cookies: each tool sets its own cookie to group the visits from one browser.
If you don't want to be measured, block these tools' cookies in your browser settings or install an extension that blocks them. DROP works fully without them. Only if you delete the sign-in cookie will you need to sign in again with a texted code.
7. Security
Every device's connection to DROP is encrypted with HTTPS. A sign-in code is valid for only a few minutes and the number of requests for it is limited. The account menu lists the devices you've signed in with, and you can sign any of them out from there.
If we find that someone reached your information without permission, we text you within 72 hours and say what was at risk.
8. Your choices
Article 59 of the Electronic Commerce Act gives you the right to access your data, correct it, and ask at any time for it to be deleted completely. In DROP:
- See and correct: your name and devices are in the account menu and can be changed there.
- Take your files: download all your files at once, zipped.
- Close your account: ask through the contact page. The account is closed within [3] working days and your data is deleted as described in section 3.
- Get a copy: you can ask for a list of the information we hold about you. We send it within [10] working days.
9. Users under 18
If you're under 18, use DROP only with the permission of your parent or legal guardian. They must also make any purchase.
10. Changes to this page
If we change this page, you'll see it inside DROP itself, not by text or email. The next time you open DROP in the browser or an app, a message tells you what changed and from what day it applies. The message keeps coming back until you press «Seen».
An important change, meaning we ask you for something new or give your information to a new service, shows in DROP at least 7 days before it applies. If you don't agree, you can take your files and close your account before that day. Every version stays in the list of changes at the bottom of this page.
11. Contact
DROP is a product of [company name], national ID [ID], address [office address]. A question or complaint about your personal information? Write to [privacy email] or send a message from the contact page. We reply within [5] working days.
List of changes
- Version 1[effective date]First version.