Last updated October 1, 2026
This policy explains what we collect and why. We are the data controller for account data and a processor for the files you store.
Account details (name, email), billing information, and operational logs (IP address, timestamps) needed to run and secure the Service.
We store your files to provide the Service. They are encrypted at rest. We do not scan file contents except as strictly required to operate storage (e.g. integrity checks) or where legally compelled.
In EU data centres (Frankfurt, Amsterdam). We do not transfer personal data outside the EU without an appropriate safeguard.
Operational logs are kept for 90 days. Account data is deleted within 30 days of account closure.
Business and Enterprise customers can sign our DPA. Request a copy at legal@bdnd.org.
You can access, correct, export or delete your personal data from the dashboard or by contacting privacy@bdnd.org.