Privacy Policy

1. Who we are

SeraVault CloudSync ("CloudSync", "we", "us") is a desktop application for Linux developed by SeraVault. You can reach us at cloudsync@seravault.com.

2. What data we collect

2.1 Data stored only on your machine

The following information never leaves your computer and is never transmitted to SeraVault:

• Cloud account credentials — OAuth tokens for Google Drive, Dropbox, OneDrive, Amazon S3, Backblaze B2, and Cloudflare R2 are stored in your local configuration directory (~/.config/cloudsync/) with file permissions set to owner-read-only (600). We never see, store, or transmit these credentials.
• Sync configuration — folder paths, sync intervals, and conflict resolution settings are stored locally in the same configuration directory.
• Your files — CloudSync transfers files directly between your local filesystem and your cloud storage provider. SeraVault never has access to the contents of your files.

2.2 Data transmitted to SeraVault

The only data transmitted to SeraVault servers is:

• Email address — when you sign in to activate a subscription, your email address is sent to our subscription validation service to verify your purchase status. This is the only personal data we receive.
• Subscription status — our server returns whether your subscription is active and when it renews. No other data is exchanged.
• Anonymous install check-in — on each launch, CloudSync reports a randomly generated machine identifier (not derived from any hardware identifier), your OS distribution and version, CPU architecture, desktop environment, app version, and install method (Flatpak/Snap/other). If you are signed in, your email address is included so that organization-wide license holders can see install counts for their domain; we do not otherwise link this data to your identity. This check-in never includes file names, folder paths, or sync content, and is used only to report install counts and prioritize platform support.

2.3 Data collected by third parties

• Stripe — subscription payments are processed by Stripe. When you purchase a subscription, Stripe collects your payment information in accordance with Stripe's Privacy Policy. SeraVault never receives or stores your payment card details.
• Cloud storage providers — your chosen cloud provider (Google, Dropbox, Microsoft, Amazon, Backblaze, Cloudflare) processes your files according to their own privacy policies.
• Google Analytics — this website (cloudsync.seravault.com) uses Google Analytics to understand site traffic. Google Analytics runs only in your browser when visiting this website; it is not included in the CloudSync desktop application. See Google's Privacy Policy for details.

3. How we use your data

Your email address is used solely to verify that you have an active subscription. We do not use it for marketing, share it with third parties, or store it beyond what is necessary to provide the subscription service.

4. Data retention

Your email address and subscription status are cached locally on your machine and re-validated with our servers at most once per week. You can remove this data at any time by signing out in Preferences → Subscription → Sign Out, or by deleting ~/.config/cloudsync/license.json.

The randomly generated machine identifier used for install check-ins is stored in ~/.config/cloudsync/machine-id and persists until you delete that file (a new one is generated on next launch) or uninstall CloudSync.

5. Google API services

CloudSync's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request access to the Google Drive files you explicitly choose to sync.
• Google Drive data is used only to perform the sync operations you configure — it is not used for any other purpose.
• We do not share Google Drive data with any third parties.
• We do not use Google Drive data for advertising.
• Google OAuth tokens are stored locally on your machine and are never transmitted to SeraVault servers.

6. Security

All credential files are stored with owner-read-only permissions (chmod 600). Communication with our subscription validation service uses HTTPS. We do not store your cloud provider credentials on any SeraVault server.

7. Children's privacy

CloudSync is not directed at children under the age of 13. We do not knowingly collect personal information from children.

8. Changes to this policy

We may update this policy from time to time. Changes will be posted at this URL with an updated effective date. Continued use of the app after changes constitutes acceptance of the revised policy.

9. Contact

Questions about this policy? Email us at cloudsync@seravault.com.