Terms of service
These terms apply when you use Dropvi to send or receive files, with or without an account, on the website, a branded subdomain, the API or the command-line tool.
By using Dropvi you agree to them. Our privacy notice explains how we use personal data.
Last updated 26 October 2026.
Who we are
Dropvi is run by Zorinto Ltd, a private limited company registered in England and Wales with company number 15494238. Our registered office, which is also our address for these terms, is 136 Littlebrook Avenue, Slough, England, SL2 2NE. In these terms, “we” and “us” mean Zorinto Ltd.
Contact us at info@dropvi.com.
Using Dropvi
- You must be 18 or over to use Dropvi.
- You can send and receive files without an account. An account is signed in to with a code emailed to you; keep access to that email address secure, because anyone who can read it can sign in.
- If you use Dropvi for a business, you confirm that you can accept these terms for it.
- The limits of each plan, such as the largest transfer and the longest expiry, are shown on the pricing page. Dropvi also limits how often some requests can be made, to protect the service.
What you may not send
You are responsible for what you send with Dropvi. Do not use Dropvi to send or share:
- child sexual abuse or exploitation material, or anything that grooms or sexualises children;
- terrorist content, or material that encourages or helps anyone to commit a terrorist act;
- intimate images of anyone shared without their consent, or threats to share them;
- pornographic content, meaning content of such a nature that it is reasonable to assume that it was produced solely or principally for the purpose of sexual arousal, whether it is legal or not;
- content which encourages, promotes or provides instructions for suicide;
- content which encourages, promotes or provides instructions for an act of deliberate self-injury;
- content which encourages, promotes or provides instructions for an eating disorder or behaviours associated with an eating disorder;
- content which is abusive and which targets race, religion, sex, sexual orientation, disability or gender reassignment;
- content which incites hatred against people of a particular race, religion, sex or sexual orientation, who have a disability, or who have the characteristic of gender reassignment;
- content which encourages, promotes or provides instructions for an act of serious violence against a person;
- bullying content, including content targeted against a person which conveys a serious threat, is humiliating or degrading, or forms part of a campaign of mistreatment;
- content which depicts real or realistic serious violence against a person, or the real or realistic serious injury of a person in graphic detail;
- content which depicts real or realistic serious violence against an animal, or the real or realistic serious injury of an animal in graphic detail, or realistically depicts serious violence against, or the serious injury in graphic detail of, a fictional creature;
- content which encourages, promotes or provides instructions for a challenge or stunt highly likely to result in serious injury to the person who does it or to someone else;
- content which encourages a person to ingest, inject, inhale or in any other way self-administer a physically harmful substance, or a substance in such a quantity as to be physically harmful;
- content that shames or otherwise stigmatises body types or physical features;
- content that promotes depression, hopelessness and despair;
- anything else that is illegal in the UK, including fraud, threats, harassment, stirring up hatred, and selling drugs or weapons;
- malware, phishing pages or anything else meant to harm devices or trick people;
- a branded portal, request link, transfer or message that pretends to be another person or organisation, or uses their name, logo or trade marks without their permission;
- material that infringes someone else’s copyright, trade marks or other rights, or that you otherwise do not have the right to send;
- emails to people who have not asked to hear from you, using Dropvi’s email delivery;
- trying to get round plan limits, rate limits, PINs or download limits, or to reach data that is not yours;
- attacking, overloading or probing Dropvi, its API or its infrastructure, except through a security report to us.
Content harmful to children
Children may use Dropvi, or be sent a Dropvi link, even though our accounts are for adults. So, to comply with section 12 of the Online Safety Act 2023, every kind of content harmful to children listed above is prohibited on every part of Dropvi, for all users, adults included: pornographic content and the content about suicide, deliberate self-injury and eating disorders (the four kinds of primary priority content); abusive content, content inciting hatred, content about serious violence against a person, bullying content, violent content about animals and fictional creatures, dangerous challenges and stunts, and harmful substances (each kind of priority content); and content that shames body types or physical features and content that promotes depression, hopelessness and despair (the two kinds of non-designated content we have identified). This is how we prevent children of any age from encountering each kind of primary priority content, and how we protect children from each kind of priority and non-designated content:
- Anyone can report it on the transfer’s download page or the request link’s upload page, with the reason Pornography or other content harmful to children (for pornography, suicide, self-injury, eating disorder and depression content), Serious violence (for violence against a person, an animal or a fictional creature), Bullying, abuse or hatred (for bullying, abusive and hateful content, and body shaming), or Dangerous challenges or harmful substances.
- When a report says a transfer or request link contains any of these kinds, or we become aware of it in another way, a person reviews it. If we find it does, we take it down for everyone, and we may suspend or close the account that sent it.
- We do not check anyone’s age. Transfers are end-to-end encrypted, so we cannot see what they contain unless someone gives us the full link, and we do not use proactive technology to find this content.
Request links
- A request link lets anyone who has it send files to the account that made it. If you make one, you are responsible for what you ask people to send and for having the right to receive it.
- A request link must not pretend to be another person or organisation, and must not be used to collect identity documents, passwords, payment details or anything else under false pretences.
- If you have Dropvi email your request link, you are responsible for whom you email: only people who expect to hear from you, and never for marketing or in bulk. The email names you and gives your account’s email address. Each plan limits how many addresses you can email a day, and we may stop you emailing links if people report the emails.
- If you send files through someone’s request link, What you may not send applies to you. We have not checked who made the link; you cannot open or delete the files after sending them, so contact the link’s owner if you need them removed.
- Files sent to your links count against your account’s storage, and each plan limits how many links can be open at once and how much each link takes, as the pricing page shows.
- We may close or disable a request link. A link we disable cannot be reopened.
How we deal with illegal content
- Every transfer is end-to-end encrypted in the sender’s browser or on their computer, so we cannot see what a transfer contains. We do not use automated scanning or any other proactive technology to detect content.
- We rely on reports. When a transfer or request link is reported, or we become aware of illegal content in any other way, we review it. If we find or reasonably suspect that it is illegal or breaks these terms, we take it down straight away: a disabled transfer can no longer be downloaded and its files are deleted, and a disabled request link cannot be reopened.
- We review reports in this order: child sexual abuse material first, then intimate images shared without consent, then terrorist content, then other illegal content and phishing, then content harmful to children (pornography and the other kinds listed above, serious violence, bullying, abuse or hatred, and dangerous challenges or harmful substances), then every other report, each oldest first.
- Child sexual exploitation and abuse content. When we are aware of it, we take it down at once, suspend the account that sent it, if it was sent from an account, and report it to the National Crime Agency, as the Online Safety Act 2023 requires. The law requires us to keep the content and the records about it for a year after our report, and the report’s reference for five years. We keep them only for that, and nobody can download the reported content.
- Terrorism content. When we are aware of it, we take it down at once. We suspend or close any account, including its branded portal, that we have reasonable grounds to think is run by or for a proscribed organisation, and we may pass information to the police.
- Other priority illegal content, such as fraud, threats and harassment, stirring up hatred, selling drugs or weapons, extreme pornography and encouraging suicide or self-harm: we take it down as soon as we have reviewed a report and found it illegal. We aim to review these reports within 2 working days, and may pass information to the police where the law requires or allows it.
- Intimate image content. If an intimate image of you is shared on Dropvi without your consent, you, or someone acting for you, can report it with the reason Intimate image shared without consent. The form asks you to declare that it is intimate image content, that you are the person shown or are acting for them, and that the report is made in good faith and is true to the best of your knowledge and belief, and asks for your email address. We take the content down as soon as reasonably practicable, and no later than 48 hours, after we receive the report, unless we consider that it is not intimate image content or that the person reporting is not the person shown or acting for them. We usually email you a link to confirm your report. If you have confirmed it and we have not dealt with it 46 hours after we received it, Dropvi stops the transfer being downloaded automatically, without deleting it, and it stays unavailable until we have decided; we tell the account or address that sent it which transfer it is and how to appeal. To stop this being misused, Dropvi takes down at most 3 transfers automatically in any 24 hours for any one account or sender address (transfers sent with neither count together), and for any one reporter email address or IP address. A report beyond that, or one whose confirmation link could not be sent because its address had already had 3 emails from us that day, is reviewed by a person within the 48 hours instead. Dropvi cannot see inside transfers, so it cannot find other copies of the same image that nobody has reported: report each link you know of.
- We apply this the same way to every transfer and every user, whatever their plan.
Reports, complaints and appeals
Anyone can use these routes, with or without an account.
- Report a transfer with the report form on its download page, or by emailing info@dropvi.com with its link. Because transfers are encrypted, we may not be able to see what a reported transfer contains unless you give us the full link, including the part after the # sign. Report a request link with the form on its upload page.
- After you report, the page tells you what happens next. If you give your email address, we usually email you straight away to confirm that we received your report (at most 3 such emails go to one address in 24 hours, ignoring any +tag), and for an intimate image report we email you the outcome when we have decided. We review child sexual abuse material first, then intimate images, then terrorist content, then other illegal content and phishing, then content harmful to children, then every other report. We remove intimate image content as soon as reasonably practicable, and no later than 48 hours after we receive the report, and we aim to review every other report within 2 working days.
- Intimate image complaints. If you made an intimate image report and the content is still there after 48 hours, or you disagree with what we decided, email info@dropvi.com with the subject Intimate image complaint. We deal with these complaints as a priority.
- Appeal if we disabled your transfer or suspended or closed your account and you think we were wrong: email info@dropvi.com from your account’s address and say why. We review the decision, and if we got it wrong we lift the suspension, make the transfer available again, or let you use your address on Dropvi again after a closure, and tell you. A disabled transfer’s files are already deleted, unless we kept them as described above, so you may need to send it again.
- Complain about how we deal with illegal content or follow these terms, or about anything else, by emailing info@dropvi.com.
Who we tell about a report
The report forms show this before you send a report.
- We never tell the person who sent the transfer, or anyone else using Dropvi, who made a report. We do not pass on your email address, what you write or any link you give us.
- We do not tell the person who sent the transfer that it was reported, except in the cases below.
- If we have not dealt with a report of an intimate image shared without consent within 46 hours, Dropvi stops the transfer being downloaded automatically. Then we email the person who sent it, if we have a way to contact them, to say which transfer it is and what it was reported for.
- If we turn the link off, its owner can see that Dropvi turned it off, but not why.
- If we suspend or close their account, we usually email them to say so and how to appeal. We may tell them why, but not who reported it. We do not email them if that could help someone get away with breaking the law.
- If they appeal against what we decided, we tell them our decision and the reason for it. We never tell them who reported it, or anything you told us.
- We may give information about a report to the police or the National Crime Agency when the law says we must or may.
What can happen after a report
For each reason you can choose on a report form, this is what can happen and whether we tell you our decision. The form shows it when you choose a reason, and we repeat it when you send the report.
Child sexual abuse material
If you report a transfer
- If it is child sexual abuse material, we take the transfer down at once. We keep it locked away as evidence, where nobody can download it, and report it to the National Crime Agency.
- We also suspend or close the account that sent it, if there is one.
- If it is not child sexual abuse material, we deal with it like any other report.
If you report a request link
- If the link is being used for child sexual abuse, we turn it off at once and report it to the National Crime Agency.
- We also suspend or close the owner’s account.
- If it is not child sexual abuse material, we deal with it like any other report.
We do not usually email you our decision. If you write to info@dropvi.com, we will tell you the outcome.
Intimate image shared without consent
If you report a transfer
- If it is an intimate image shared without consent, we take the transfer down, so nobody can download it, and delete its files. We may also suspend or close the account that sent it, if there is one.
- If it is not, or you are not the person shown or acting for them, we leave the transfer as it is. If we had stopped it being downloaded while we checked, we make it available again, unless it has run out.
If you report a request link
- If it is an intimate image shared without consent, we turn the link off, so nobody can send files to it, and its owner cannot turn it back on. We may also suspend or close the owner’s account.
- If it is not, or you are not the person shown or acting for them, we leave the link as it is.
We will usually email you our decision and what we did.
Terrorist content
If you report a transfer
- If it is terrorist content, we take the transfer down, so nobody can download it, and delete its files. We may also suspend or close the account that sent it, if there is one, and tell the police.
- If we find it does not break our rules or the law, we leave the transfer as it is. If we had stopped it being downloaded while we checked, we make it available again, unless it has run out.
If you report a request link
- If it is terrorist content, we turn the link off, so nobody can send files to it, and its owner cannot turn it back on. We may also suspend or close the owner’s account, and tell the police.
- If we find it does not break our rules or the law, we leave the link as it is.
We do not usually email you our decision. If you write to info@dropvi.com, we will tell you the outcome.
Other illegal content
If you report a transfer
- If it is illegal, we take the transfer down, so nobody can download it, and delete its files. We may also suspend or close the account that sent it, if there is one, and tell the police.
- If we find it does not break our rules or the law, we leave the transfer as it is. If we had stopped it being downloaded while we checked, we make it available again, unless it has run out.
If you report a request link
- If it is illegal, we turn the link off, so nobody can send files to it, and its owner cannot turn it back on. We may also suspend or close the owner’s account, and tell the police.
- If we find it does not break our rules or the law, we leave the link as it is.
We do not usually email you our decision. If you write to info@dropvi.com, we will tell you the outcome.
Phishing or scam
If you report a transfer
- If it breaks our rules or the law, we take the transfer down, so nobody can download it, and delete its files. We may also suspend or close the account that sent it, if there is one.
- If we find it does not break our rules or the law, we leave the transfer as it is. If we had stopped it being downloaded while we checked, we make it available again, unless it has run out.
If you report a request link
- If it breaks our rules or the law, we turn the link off, so nobody can send files to it, and its owner cannot turn it back on. We may also suspend or close the owner’s account.
- If we find it does not break our rules or the law, we leave the link as it is.
We do not usually email you our decision. If you write to info@dropvi.com, we will tell you the outcome.
Pornography or other content harmful to children
If you report a transfer
- Pornography, and content that encourages or gives instructions for suicide, self-harm or an eating disorder, are not allowed on Dropvi for anyone. Nor is content that promotes depression, hopelessness and despair.
- If it is one of these, we take the transfer down, so nobody can download it, and delete its files. We may also suspend or close the account that sent it, if there is one.
- If we find it does not break our rules or the law, we leave the transfer as it is. If we had stopped it being downloaded while we checked, we make it available again, unless it has run out.
If you report a request link
- Pornography, and content that encourages or gives instructions for suicide, self-harm or an eating disorder, are not allowed on Dropvi for anyone. Nor is content that promotes depression, hopelessness and despair.
- If it is one of these, we turn the link off, so nobody can send files to it, and its owner cannot turn it back on. We may also suspend or close the owner’s account.
- If we find it does not break our rules or the law, we leave the link as it is.
We do not usually email you our decision. If you write to info@dropvi.com, we will tell you the outcome.
Serious violence
If you report a transfer
- Content that shows serious violence against a person or an animal, or encourages or gives instructions for serious violence against a person, is not allowed on Dropvi for anyone.
- If it is, we take the transfer down, so nobody can download it, and delete its files. We may also suspend or close the account that sent it, if there is one.
- If we find it does not break our rules or the law, we leave the transfer as it is. If we had stopped it being downloaded while we checked, we make it available again, unless it has run out.
If you report a request link
- Content that shows serious violence against a person or an animal, or encourages or gives instructions for serious violence against a person, is not allowed on Dropvi for anyone.
- If it is, we turn the link off, so nobody can send files to it, and its owner cannot turn it back on. We may also suspend or close the owner’s account.
- If we find it does not break our rules or the law, we leave the link as it is.
We do not usually email you our decision. If you write to info@dropvi.com, we will tell you the outcome.
Bullying, abuse or hatred
If you report a transfer
- Bullying, and content that abuses or stirs up hatred against people because of their race, religion, sex, sexual orientation, disability or gender reassignment, are not allowed on Dropvi for anyone. Nor is content that shames people for their body or looks.
- If it is one of these, we take the transfer down, so nobody can download it, and delete its files. We may also suspend or close the account that sent it, if there is one, and tell the police if it is a crime.
- If we find it does not break our rules or the law, we leave the transfer as it is. If we had stopped it being downloaded while we checked, we make it available again, unless it has run out.
If you report a request link
- Bullying, and content that abuses or stirs up hatred against people because of their race, religion, sex, sexual orientation, disability or gender reassignment, are not allowed on Dropvi for anyone. Nor is content that shames people for their body or looks.
- If it is one of these, we turn the link off, so nobody can send files to it, and its owner cannot turn it back on. We may also suspend or close the owner’s account, and tell the police if it is a crime.
- If we find it does not break our rules or the law, we leave the link as it is.
We do not usually email you our decision. If you write to info@dropvi.com, we will tell you the outcome.
Dangerous challenges or harmful substances
If you report a transfer
- Content that encourages or gives instructions for a dangerous challenge or stunt is not allowed on Dropvi for anyone. Nor is content that encourages someone to take a harmful substance, or a harmful amount of one.
- If it is one of these, we take the transfer down, so nobody can download it, and delete its files. We may also suspend or close the account that sent it, if there is one.
- If we find it does not break our rules or the law, we leave the transfer as it is. If we had stopped it being downloaded while we checked, we make it available again, unless it has run out.
If you report a request link
- Content that encourages or gives instructions for a dangerous challenge or stunt is not allowed on Dropvi for anyone. Nor is content that encourages someone to take a harmful substance, or a harmful amount of one.
- If it is one of these, we turn the link off, so nobody can send files to it, and its owner cannot turn it back on. We may also suspend or close the owner’s account.
- If we find it does not break our rules or the law, we leave the link as it is.
We do not usually email you our decision. If you write to info@dropvi.com, we will tell you the outcome.
Malware or virus
If you report a transfer
- If it breaks our rules or the law, we take the transfer down, so nobody can download it, and delete its files. We may also suspend or close the account that sent it, if there is one.
- If we find it does not break our rules or the law, we leave the transfer as it is. If we had stopped it being downloaded while we checked, we make it available again, unless it has run out.
If you report a request link
- If it breaks our rules or the law, we turn the link off, so nobody can send files to it, and its owner cannot turn it back on. We may also suspend or close the owner’s account.
- If we find it does not break our rules or the law, we leave the link as it is.
We do not usually email you our decision. If you write to info@dropvi.com, we will tell you the outcome.
Copyright infringement
If you report a transfer
- If it breaks our rules or the law, we take the transfer down, so nobody can download it, and delete its files. We may also suspend or close the account that sent it, if there is one.
- If we find it does not break our rules or the law, we leave the transfer as it is. If we had stopped it being downloaded while we checked, we make it available again, unless it has run out.
If you report a request link
- If it breaks our rules or the law, we turn the link off, so nobody can send files to it, and its owner cannot turn it back on. We may also suspend or close the owner’s account.
- If we find it does not break our rules or the law, we leave the link as it is.
We do not usually email you our decision. If you write to info@dropvi.com, we will tell you the outcome.
Other
If you report a transfer
- If it breaks our rules or the law, we take the transfer down, so nobody can download it, and delete its files. We may also suspend or close the account that sent it, if there is one.
- If we find it does not break our rules or the law, we leave the transfer as it is. If we had stopped it being downloaded while we checked, we make it available again, unless it has run out.
If you report a request link
- If it breaks our rules or the law, we turn the link off, so nobody can send files to it, and its owner cannot turn it back on. We may also suspend or close the owner’s account.
- If we find it does not break our rules or the law, we leave the link as it is.
We do not usually email you our decision. If you write to info@dropvi.com, we will tell you the outcome.
We acknowledge an emailed report, appeal or complaint within 2 working days and tell you the outcome. If you do not want further messages about it, say so and we will not send any.
If you think we removed your content or suspended your account in breach of these terms, you also have the right to bring a claim against us for breach of contract.
Your files and keys
- Your files stay yours. You allow us only to store them, copy them as storage requires and deliver them to people with the link, until the transfer ends.
- The key to a transfer is part of its link, after the # sign. We do not receive it, except once to write the email when you send by email, and we never store it, so we cannot recover a transfer if the key is lost.
- Anyone with the full link can open the transfer until it ends, unless you add a PIN or password. You decide who gets the link and the key.
Expiry and deletion
- A transfer ends when it expires, reaches its download limit or is revoked. The sender chooses an expiry of up to 7 days on the free plan, or up to 365 days on a paid plan, counted from when the transfer was sent. Until it ends, the sender can extend it within that limit, unless it is under review after a report or has reached its download limit.
- If you are signed in, we email you about a day before each of your transfers expires, once per transfer. You can turn these reminders off in your dashboard. A reminder is a courtesy: a transfer still ends on time if one does not arrive.
- Files are deleted after a transfer ends, as described in the privacy notice, and cannot be restored.
- Dropvi delivers files; it is not a backup or storage service. Keep your own copy of anything you send.
- Fair use: an account’s live transfers (those still uploading, and those not yet expired or deleted) can hold up to 100 GB at once on the free plan, 500 GB on Business Pro and 2 TB on Teams & Suite, where the 2 TB is shared by everyone in the team, whatever the number of seats. A transfer that would go over is refused; revoke transfers you no longer need to make room. As with transfer sizes, a GB here is 1,073,741,824 bytes and a TB is 1,024 GB.
- Without an account, or on the free plan, up to 100 GB can be uploaded from one network (an IP address, or for IPv6 a /64 network) in any 24 hours, and up to 300 GB from one IPv6 /48 network. Everyone sending from that network without an account or on the free plan shares it. A transfer counts in full as soon as it is started, whether or not its upload finishes, and still counts after it is revoked. Paid plans are not limited by any of these, and their uploads do not count towards them.
- When your paid subscription ends, because it was cancelled or its first payment never went through, each of your transfers that would have lasted longer ends 7 days later. Cancelling at the end of a billing period, or within the 14-day cooling-off period, takes effect when the subscription ends. No transfer is given longer than it already had.
- On Teams & Suite, the same applies to the transfers the team’s members sent with the team when the owner’s subscription ends, and when the owner moves to Business Pro, which is for one person, the members’ team transfers end 7 days later while the owner’s own are unchanged. A member who is removed or leaves keeps their transfers until they expire, unless the owner revokes them.
When we process personal data for you
This section is the contract that Article 28 of the UK GDPR requires between a controller and its processor. It applies when a business or other user, not acting in a purely personal or household capacity, uses Dropvi to send files or to receive them through a request link. For the personal data described below, you are the controller and Zorinto Ltd is your processor. It does not apply to use in a purely personal or household capacity.
We remain the controller of the personal data our privacy notice describes for our own purposes, such as accounts, billing, request logs, rate limits, upload budgets and reports of misuse, including the transfer records we keep to deal with reports.
- Subject matter and duration. Storing and delivering the files you send with Dropvi or receive through your request links, from upload until they and their records are deleted as described below.
- Nature and purpose. We receive, store, deliver and delete encrypted files and their encrypted details, and send the emails you ask us to send, only to provide Dropvi to you.
- Personal data and people concerned. Any personal data in the files, file names, titles, messages and sender names that you send, or that people upload to your request link with the name and message they add; and your recipients’ email addresses, where you enter them. The people concerned are anyone that data is about, your recipients, and the people who send files to your request links.
- What we cannot see. Files, their names and types, titles, messages and sender names are encrypted in the sender’s browser or on their computer before upload. The key is in the link after the # sign, or for a request link it is your receive key, and we do not store either. We receive a transfer’s key only to write the email when you send by email, or if someone gives us its full link, for example in a report of misuse. We can see recipients’ email addresses, file sizes, the number of files and dates. The records of older transfers sent before end-to-end encryption was introduced keep their title, message and sender name as they were sent, until those records are deleted.
- Your instructions. We process this data only on your documented instructions: these terms and the choices you make in Dropvi, such as what you send and to whom, expiry, download limits, request link settings, revoking a transfer and deleting your account. That includes the transfers outside the UK described below. If the law requires us to process it in another way, we tell you first unless the law forbids that. We tell you straight away if we think an instruction breaks data protection law.
- Your obligations and rights. You are responsible for having a lawful basis to send the data and to ask people for it, for telling people what the law requires, and for giving us only lawful instructions. You have the rights in this section, including to object to a new sub-processor and to have information and audits.
- Confidentiality. Only people we authorise can reach this data in our systems, and we authorise only people who have given a confidentiality undertaking, which we keep on record. Today that is only Zorinto Ltd’s director, who can open a transfer only if someone gives us its full link.
- Security. End-to-end encryption with AES-256-GCM before upload; HTTPS with TLS in transit; encryption at rest with AES-256 by Cloudflare for stored files and our database; PINs and passwords stored only as salted PBKDF2 hashes, upload and deletion keys as SHA-256 hashes, and IP addresses in download and report records as keyed hashes; an admin view only Dropvi’s operator can use; rate limits and a Cloudflare Turnstile check; and automated tests of who can read each transfer, which must pass before each release. The Security page gives the details. We do not keep backup copies of files, so a file lost from storage cannot be restored: keep your own copy.
- Sub-processors. You give us general written authorisation to use the providers listed in Who processes data for us in the privacy notice. For this data those are Cloudflare, which hosts Dropvi and stores the files and our database, and Zoho’s ZeptoMail, which sends the emails. Each processes this data under its data processing terms with us, and we remain fully responsible to you for how it does so. Before we add or replace a provider that handles this data, we update that list and email account holders at least 30 days ahead. You can object on reasonable data protection grounds by emailing info@dropvi.com; if we cannot resolve it, you can stop using Dropvi for this processing and cancel a paid plan, and we refund any part of a billing period you have paid for and will not use.
- Transfers outside the UK. Cloudflare runs data centres around the world and chooses where files are stored, under its data processing addendum, which uses the International Data Transfer Addendum. Recipients’ email addresses and the emails we send for you go to Zoho’s United Kingdom data centre. One transfer goes to India: the messages and report notices held in the info@dropvi.com mailbox. As the privacy notice says, we have not yet put an International Data Transfer Agreement or the Addendum in place for that transfer, so no safeguard covers it yet. We will update this section when one is in place.
- Helping with people’s rights. We help you answer requests from people using their data protection rights, as far as we can. Because we cannot open files, names or messages, we cannot search them, copy their contents or say what personal data they hold; only someone with the key can. We can tell you which transfers your account sent or received, with recipients, sizes and dates; revoke them (you can also do this yourself); and pass on to you any request we receive about your files.
- Helping with security, breaches and impact assessments. We help you meet your duties under Articles 32 to 36 of the UK GDPR by giving you what we know about our processing, including this section, the privacy notice and the Security page, for your security, breach notification, data protection impact assessments and any consultation with the Information Commission.
- Personal data breaches. We tell you without undue delay after we become aware of a personal data breach affecting this data, by email to your account address, with what we know about it and what we are doing. Where we have no address for you, because you sent without an account, we post a notice on our status page.
- Deletion at the end. We cannot return your files in readable form, because only you and the people you share the key with hold it; download what you need while a transfer is open. Files are deleted straight away when a transfer is revoked or disabled, and by the hourly clean-up after it expires. Transfer records, including recipients’ addresses, are deleted 365 days after the transfer ends or, for transfers linked to your account, when you delete your account, as the privacy notice describes. As controller, we keep a transfer’s files and record while a report about it is open, until we have dealt with it, and we keep content reported to the National Crime Agency, with its records, for as long as the law requires, as our privacy notice describes. Our database provider keeps recovery copies for up to 30 days, which we use only to recover from a fault.
- Information and audits. We make available the information you need to show that we meet this section, and answer reasonable written questions. We allow for and contribute to audits by you or an auditor you appoint, in proportion to the processing: on reasonable notice, by written questions first, and without access to other users’ data.
If this section conflicts with another part of these terms about how we process this personal data, this section applies.
Paid plans
- Prices are in pounds sterling and shown on the pricing page. Stripe takes payment for us.
- Zorinto Ltd is not registered for VAT, so no VAT is charged on these prices.
- A paid plan is a subscription, billed monthly or yearly in advance. It starts as soon as you pay, or for a Business Pro free trial when the trial ends, and renews automatically at the end of each billing period until you cancel it.
- You can cancel at any time in Manage billing & invoices on your dashboard, or by emailing info@dropvi.com. When the subscription ends, your account moves to the free plan’s limits.
- Teams & Suite is priced by seat: the price includes 5 seats, the owner’s included, and each further seat costs the amount the pricing page shows, up to 50 seats bought online. The owner changes the number of seats on the dashboard: added seats are charged straight away for the rest of the billing period, and removed seats are credited against later invoices. A seat cannot be removed while a member or a pending invitation holds it.
- The team’s owner pays for the team and is responsible for whom they invite. Members use Dropvi under these terms, and their own accounts stay theirs. The owner can remove members and revoke the transfers they sent with the team, but cannot open them.
- If you think you have been charged in error, email info@dropvi.com.
Business Pro free trial
- Business Pro can start with a free trial: 7 days free, then £12 a month (or £120 a year) unless you cancel. Teams & Suite has no trial.
- You give your card at checkout. Nothing is charged during the 7 days. When the trial ends, the subscription starts and your card is charged the price you chose, then every month or year until you cancel, as for any paid plan.
- We email you 2 days before the trial ends, with the date and the amount. If you cancel in Manage billing & invoices before the trial ends, you are not charged at all, and your account moves to the free plan’s limits when the trial ends.
- One trial per account, email address, Stripe customer and card, and only for an account or customer that has not had a Dropvi subscription or trial before. Opening a second account, or using a new address or payment profile, to get another trial is not allowed; if the card you give has had a trial, the subscription starts at once without one, and we email you to say so. During the trial the free plan’s daily recipient limit applies, and a branded portal can be set up but goes live with the first payment. If you open checkout and leave without finishing, the trial is offered again after 24 hours.
- During the trial you have everything Business Pro includes. If you are a consumer, your right to cancel below applies from the day after you start the trial, and it covers the first charge: cancel within those 14 days and we refund anything you paid.
Your right to cancel
If you are a consumer, you have the right to cancel a paid plan within 14 days without giving any reason. The 14 days start on the day after you subscribe, or after you start a free trial.
To cancel, tell us clearly that you want to cancel before the 14 days end: cancel in Manage billing & invoices, email info@dropvi.com, or write to us at the address above. You can use the cancellation form below, but you do not have to.
If you cancel within the 14 days, we refund everything you paid for the plan, with nothing taken off for the days you used it. We refund within 14 days of the day you tell us, to the card or other payment method you paid with, and there is no fee for the refund.
Changes to Dropvi and to prices
- We work to keep Dropvi available, and post its status at status.zorinto.com, but we cannot promise that it will always be available or free of faults.
- We may improve Dropvi, or change it to meet the law or keep it secure. Before a change that takes away something important from your paid plan, or raises its price, we email you at least 30 days ahead and tell you why.
- A new price starts from your next renewal after that notice, so a yearly plan keeps its price until it renews. If you do not want the change, you can cancel before it applies, and we refund any part of a billing period you have paid for and will not use.
Suspending or closing accounts
We may disable a transfer, or suspend or close an account, if we reasonably believe it breaks these terms or the law, or puts other people or Dropvi at risk. Where we can, and where it would not help someone avoid the law or put anyone at risk, we tell you first and give the reason.
While an account is suspended, it is signed out everywhere and cannot sign in, nothing can be sent from it, and its transfers, request links and branded portal cannot be used. A suspension deletes nothing: when we lift it, the account and its transfers and request links that have not expired work again, after you sign in. We email the account’s address when we suspend it, with how to appeal, unless that could help someone avoid the law or put anyone at risk, and again when we lift it. While a team’s owner is suspended, the team’s portal and branding are not shown, and its members send on their own plans.
When we close an account, it is deleted in the same way as when you delete your own account: you are signed out everywhere, and its transfers, request links, branded portal and team are removed. A transfer we are keeping as evidence, for a report to the National Crime Agency or while we decide a report, keeps its files and records for as long as our privacy notice says, and nobody can download it. A transfer with a report still open keeps its record, but its files are deleted. We email the account’s address that it is closed, with how to appeal, and tell the members of a team it owned, unless that could help someone avoid the law or put anyone at risk. Before we close an account with a paid subscription, we cancel the subscription, and we may suspend the account meanwhile.
After we close an account, we may refuse sign-in, and new accounts, for that email address and any version of it with a +tag, for up to 5 years, and suspend any other account on such a version of it. We keep only a coded version of the address for this, as our privacy notice explains. If you appeal and we find we got it wrong, we remove this so you can use the address again, but transfers that were deleted cannot be brought back.
If we suspend an account in error, we refund the paid time it was suspended. If we close a paid account for a reason that is not your fault, we refund any part of a billing period you have paid for and will not use. You can appeal any decision as described in Reports, complaints and appeals.
When a team’s owner closes their account, the team closes: its members keep their accounts and their transfers, and send on their own plans. We tell each member by email.
Our responsibility to you
- Nothing in these terms limits our liability for death or personal injury caused by our negligence, for fraud, or for anything else that the law does not allow us to limit.
- If you use Dropvi as a consumer, we provide it with reasonable care and skill, and you have other legal rights that these terms do not affect. We are not responsible for losses we could not reasonably have foreseen, or for losses caused by a lost key or link, a lost receive key or backup passphrase, by sharing a link with the wrong person, or by not keeping your own copy of your files.
- If you use Dropvi for a business, we are not liable for loss of profit, revenue, business or data, and our total liability to you in any 12 months is limited to the greater of £100 and the amount you paid us for Dropvi in those 12 months.
Changes to these terms, law and contact
We may update these terms and will change the date at the top of this page when we do. If a change matters to a paid plan, we email the account holder at least 30 days before it applies, and you can cancel before then.
These terms are governed by the law of England and Wales. If you are a consumer, you keep the protection of the law where you live, and you can bring a claim in the courts of England and Wales or of the part of the UK where you live.
You can stop using Dropvi at any time, and delete your account from the dashboard, as described in theprivacy notice.
Questions about these terms: info@dropvi.com.
Cancellation form
To Zorinto Ltd, 136 Littlebrook Avenue, Slough, England, SL2 2NE,info@dropvi.com:
I/We [*] hereby give notice that I/We [*] cancel my/our [*] contract for the supply of the following service: Dropvi [plan name],
Ordered on [*],
Name of consumer(s),
Address of consumer(s),
Signature of consumer(s) (only if this form is notified on paper),
Date
[*] Delete as appropriate.