Privacy Policy

This Privacy Policy explains how MunaZone Drive ("MunaZone", "we", "us" or "our") handles information when you use drive.munazone.com and related MunaZone Drive services.

MunaZone Drive separates three kinds of information: Google sign-in information, file and workspace information, and the device-local Password Vault. Each is handled differently as described below.

Google account information

When you sign in, Google provides your verified email address, Google account identifier, display name and profile picture. We use this information to create and identify your account.

Workspace information

We process folder and file names, file types, sizes, folder relationships, sharing settings, storage-plan information, profile preferences, basic activity records and account status. Uploaded file content is handled separately as described in the storage section.

Technical information

Our hosting provider may process request data such as IP address, browser type, device information, timestamps and security logs to deliver and protect the service. Public share access records may include time, outcome and browser user-agent information.

Normal account sign-in requests only the openid, email and profile permissions. Normal users do not grant MunaZone Drive access to their personal Google Drive.

The system owner separately connects a storage Google account using the limited drive.file permission. This lets MunaZone Drive create and manage only files and folders created or opened through the app in that connected Drive.

MunaZone Drive's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Files

Uploaded documents, photos, videos and other file bytes are stored directly in the system owner's connected Google Drive under MunaZone-managed folders. Cloudflare R2 is not used for file bytes. The owner or administrator of that connected Google Drive can access and manage those stored files.

Account and file metadata

Account records, sessions, folder structure, file metadata, sharing records and selected settings are stored in Cloudflare D1 so the app can restore your workspace after sign-in and page reloads.

Password Vault

Password Vault entries are encrypted in your browser using your master password and stored as an encrypted envelope in that device's IndexedDB. Vault entries are not uploaded to MunaZone Drive servers or the owner's Google Drive. Your encrypted backup leaves the device only when you choose to export or move it.

We use information only as reasonably necessary to:

• authenticate you and maintain secure sessions;
• create and display your workspace;
• upload, organize, preview, download, share and delete files at your request;
• apply account status, storage limits and administrator-approved plans;
• prevent abuse, investigate errors and protect users;
• respond to support, privacy and account requests; and
• meet legal obligations.

We do not sell personal information or use Google user data for targeted advertising.

Information may be disclosed to people you intentionally share a file with, to the connected Google Drive owner, to service providers that operate the platform, or when required for security or by law. Share links may allow anyone who has the link and any required password to access the shared item until the link expires or is disabled.

Our principal service providers are Google for sign-in and Drive storage, and Cloudflare for application hosting, security and structured application data.

We use essential HttpOnly cookies for Google OAuth state and your signed-in session. The normal session can last up to 30 days unless you sign out, it expires or it is revoked. These cookies are required for authentication and are not advertising cookies.

We use HTTPS, signed session state, server-side authorization checks, encrypted Google Drive credentials and browser cryptography for the Password Vault. No system is completely secure, so you should protect your Google account, Vault master password and recovery key.

We retain account and workspace information while your account is active and as needed to operate the service. Expired sessions are removed. When you permanently delete a file through the app, MunaZone Drive requests deletion of its app-managed copy in the connected Google Drive and removes related application metadata.

You may request account metadata deletion by contacting support@munazone.com. Some records may be retained when required for security, dispute resolution or legal compliance. Because file bytes are held in the connected owner Drive, the Drive owner may also need to remove retained copies. Clearing browser site data removes the device-local Password Vault from that device; this cannot be undone without an exported encrypted backup.

You can update certain profile preferences, control sharing, delete files, export an encrypted Vault backup, sign out and revoke Google access from your Google Account. Depending on where you live, you may also have rights to access, correct, delete or restrict the use of your personal information.

To make a privacy request, email support@munazone.com from the Google email associated with your account. We may verify your identity before completing the request.

MunaZone Drive is not intended for children who cannot legally consent to online services without a parent or guardian. A responsible adult must supervise any permitted family use.

We may update this policy when the service or legal requirements change. We will update the date above and provide additional notice when a material change requires it.

For privacy questions, requests or complaints, contact MunaZone Drive at support@munazone.com.

Website: https://drive.munazone.com