Privacy Policy

Jungle Ventures Group LLC, dba EZ File Drop

Effective date: September 1, 2026 Last updated: September 1, 2026

Summary

This summary explains the essentials in plain language. The full policy below has the details and controls if there is ever a conflict.

  • EZ File Drop is a file collection tool. People upload files through a form you create, and we route those files to the cloud storage you connect. We are a pipeline, not a storage service.
  • We collect two kinds of information: account information you give us to run your account, and files that pass through the Service on their way to your storage.
  • Uploaded files pass through only briefly. The temporary copy is usually removed within a day of delivery and no later than thirty days after upload. Details about each submission stay in your Submissions area until you delete them.
  • We do not sell your personal information.
  • We use a small set of trusted providers to run the Service, and we name them below.
  • Depending on where you live, you have rights over your information, including access, correction, and deletion. We explain how to use them.

This policy covers ezfiledrop.com and its subdomains (including app.ezfiledrop.com and next.ezfiledrop.com), the ezfd.app short-link service, and related services (together, the “Service”), operated by Jungle Ventures Group LLC, a California limited liability company doing business as EZ File Drop (“EZ File Drop,” “we,” “us,” or “our”).

1. Our role: controller and processor

It helps to be clear about the two different kinds of data we handle, because our responsibilities differ.

  • Account Data. For information about you as our customer (your name, email, company, billing details, and how you use the Service), we act as the data controller. This policy explains how we handle it.
  • Customer Data. For the files and form submissions that flow through the Service into your connected storage, we act as your processor. You decide what is collected and why; we only move it to the destination you chose. If those files contain personal information about other people, you are the controller of that information, and your own privacy notice and legal basis apply to the people who submit it. We process it only to provide the Service and only per your instructions.

2. Information we collect

Information you provide:

  • Account and profile details: first name, last name, email address, and optionally your company name.
  • Credentials for connecting your storage destinations: OAuth authorization for cloud providers, or server details such as host, username, and password for FTP, SFTP, and FTPS connections (described in Section 5).
  • Billing information, processed through our payment provider.
  • The content of messages you send us, such as support requests, feedback, and questions you ask our in-product chat assistant.

Information collected automatically:

  • Usage data: how you interact with the Service, features used, and actions taken.
  • Device and log data: IP address, browser type, device information, and system logs generated for operation, security, and maintenance.
  • Cookies and similar technologies, as described in Section 8.

Customer Data:

  • Files and form submissions that you or third parties upload through your Upload Forms, held temporarily as described in Section 6.

Unless we state that a piece of information is optional, the information we request is needed to provide the Service, and we may not be able to serve you without it. You are responsible for any third-party personal information you collect through the Service and confirm you have the right to provide it.

3. How we use information

We use information to:

  • provide, operate, and maintain the Service, including routing files to your chosen destinations;
  • create and manage your account and authenticate you;
  • process payments and manage subscriptions;
  • send transactional and security messages (for example, confirmation codes, password resets, delivery notifications, and billing notices);
  • send product and marketing emails you can opt out of at any time;
  • provide support and respond to your requests;
  • monitor, secure, and improve the Service, and detect and prevent fraud or abuse;
  • comply with legal obligations and enforce our Terms.

We do not use Customer Data for any purpose other than delivering it to your destination and providing the Service.

4. Artificial intelligence

We do not use your files or the personal information you provide to us to train artificial intelligence or machine learning models. If our practices change, we will update this policy.

5. How files move through the Service, and security

The Service is built as a pipeline, with security as a core design goal.

  • Communication between your browser and the Service uses HTTPS (TLS), the industry standard for encrypted transmission.
  • When files are submitted through your Upload Form, they are uploaded to our temporary storage on Amazon S3, in chunks for larger files. Files there are stored without public access and are encrypted in transit and at rest.
  • Connecting a cloud storage destination (Google Drive, Dropbox, OneDrive, Box, or SharePoint) uses OAuth 2.0, so you can see the permissions requested and revoke our access at any time from your provider. The access and refresh tokens we receive are encrypted at rest using AES-256 encryption, protected by strict access controls, and decrypted only when needed to deliver your files. Revoking access at your provider stops the connection from working; the stored token is removed from our systems when you delete the connection in the app.
  • Connecting an FTP, SFTP, or FTPS destination uses the server details you provide (such as host, username, and password), since these protocols do not support OAuth. Passwords are encrypted at rest using AES-256 encryption and decrypted only when needed to deliver your files. Connection details such as host and username are stored in our database and protected by strict access controls. When you delete a connection, its stored credentials are permanently removed from our systems.
  • The Service delivers your files to the destination you selected using the permissions or credentials you authorized. Transfers to cloud storage providers, and to SFTP and FTPS servers, are encrypted in transit. Plain FTP is an older protocol that does not encrypt data in transit by design; this is true of FTP everywhere and is not specific to our Service. If you connect a plain FTP destination, files and login details for that connection travel over the internet without encryption, while SFTP and FTPS connections are encrypted.
  • After a file is delivered to your destination, its temporary copy on Amazon S3 is typically removed within 24 hours. In all cases, temporary copies are automatically deleted no later than thirty days after upload, regardless of whether delivery succeeded. If a delivery fails, this window is what lets you retry the transfer from your admin panel before the copy is removed.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Once files reach your destination, their security depends on that provider’s settings and your configuration.

6. Data retention

  • Uploaded files: the temporary copy of each uploaded file on Amazon S3 is typically removed within 24 hours of successful delivery, and in all cases no later than thirty days after upload. These temporary copies are what the retry feature relies on, and they are not kept as long-term backups.
  • Submission records and metadata: information about each submission is stored in our database and remains available in your Submissions area until you delete the submission, the form, or your account. This can include the values an uploader entered in your form fields (which may include names and email addresses), along with file names, sizes, destination or connection links, and technical details such as IP address and browser. If you enable optional features such as Google Sheets sync, saved form-data files, email notifications, or Zapier and webhook integrations, submission data may also be copied to those destinations and retained there under your control.
  • Account Data: kept for as long as your account is active and as needed to provide the Service.
  • Billing records: retained as required for tax, accounting, and legal purposes, typically several years, even after account closure.
  • Logs and usage data: retained for a limited period for security, troubleshooting, and analytics.

After the applicable retention period, we delete or de-identify the information. Records may persist in routine, encrypted database backups for a limited time before those backups age out. Some rights (such as access, correction, deletion, and portability) cannot be exercised after the relevant data has been deleted.

7. How we share information, and our sub-processors

We do not sell your personal information. We share it only in these situations:

  • With service providers (sub-processors) who perform functions on our behalf, under contracts that limit their use of the information to providing services to us. Our key sub-processors are:
    • Amazon Web Services (AWS): temporary file storage (Amazon S3) and hosting infrastructure
    • Supabase: database and backend infrastructure
    • Stripe: payment processing and billing
    • Cloudflare: DNS, content delivery, edge functions, and the ezfd.app short-link service
    • Resend: transactional and security email delivery
    • Mailchimp: trial and marketing email delivery
    • Google Analytics / Google Tag Manager: website analytics and tag management
  • With your connected storage providers as directed by you, to deliver your files. Depending on the destinations you connect, these include Google Drive, Dropbox, OneDrive, Box, SharePoint, and any FTP/SFTP server you configure. Your use of these providers is governed by their own terms and privacy policies.
  • For legal reasons, when we believe disclosure is required to comply with a law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of EZ File Drop, our users, or others.
  • In a business transfer, such as a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this policy or notify you of any material change.

We will provide an up-to-date list of sub-processors on request. If we add or change a sub-processor in a way that materially affects your data, we will update this policy.

8. Cookies and analytics

We use a small number of cookies and similar technologies. Some are strictly necessary to run the Service, such as keeping you signed in and remembering your preferences. Others help us understand how visitors find and use our website. We do not use cookies for advertising, and we do not sell or share your information with advertisers.

Analytics cookies we set. Our website uses Google Analytics, which sets two first-party cookies:

  • _ga: tells returning visitors apart from new ones. Expires after two years.
  • _ga_4CR4N6MGFM: keeps track of a single visit as you move between pages. Expires after two years.

These cookies are written to .ezfiledrop.com, so a session continues across our marketing site and the app at next.ezfiledrop.com. They record things like which page you arrived on, which pages you viewed, and roughly where in the world you are. They do not record your name, email address, or the contents of any file.

Who processes this. Google LLC acts as our analytics processor and stores this information on servers in the United States, subject to the transfer safeguards described in Section 9. Google’s own practices are described at policies.google.com/privacy.

Your choice and legal basis. If you are in the European Economic Area, the United Kingdom, or Switzerland, analytics cookies are switched off when you arrive and stay off unless you accept them, so we rely on your consent. You will see a notice asking. Declining changes nothing about how the Service works. Elsewhere, analytics cookies are on by default under our legitimate interest in understanding usage, and you can turn them off at any time.

Changing your mind. Select “Cookie settings” in the footer of any page to review or change your choice. If you decline after previously accepting, we delete the analytics cookies already stored in your browser. You can also block or delete cookies through your browser settings, though this may affect how other websites behave.

Our chat assistant. Our in-product answer bot stores your conversation and your preference to hide it in your browser’s local storage, so the chat works and remembers your choices as you move around. This is functional storage needed to provide a feature you chose to use, not analytics, and it is never used for advertising. If you use the assistant, we may also store the conversation on our servers to provide and improve support.

Do Not Track. The Service does not currently respond to “Do Not Track” browser signals. To learn whether the third-party services we use honor those signals, please review their privacy policies.

9. International data transfers

We operate from the United States, and we and our providers may process your information there and in other countries. Data protection laws in those countries may differ from those where you live. Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to protect that information. You may contact us for more detail on the safeguards we use.

10. Your privacy rights

Depending on where you live, you may have some or all of the following rights over your personal information:

  • Access a copy of the information we hold about you.
  • Correction of inaccurate or incomplete information.
  • Deletion of your information, subject to legal exceptions.
  • Restriction or objection to certain processing.
  • Portability of information you provided, in a structured, machine-readable format, where technically feasible.
  • Withdraw consent where we rely on it, though this may limit your ability to use the Service.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at legal@ezfiledrop.com. We will respond within the time required by law (generally within 30 days, or 45 days under California law). We will not charge you for a reasonable request or discriminate against you for exercising your rights. We may need to verify your identity first.

Note that for Customer Data (files submitted through Upload Forms), we act as a processor. If your request concerns files someone submitted through a customer’s form, we will refer you to that customer, who controls that data.

For users in the European Economic Area, United Kingdom, and Switzerland (GDPR)

Where the GDPR or UK GDPR applies, we process your personal information on one or more of these legal bases: performance of our contract with you; our legitimate interests in operating and improving the Service; compliance with a legal obligation; and your consent, where applicable (for example, certain marketing). You may object to processing based on legitimate interests on grounds relating to your situation, and you may object to direct marketing at any time without giving a reason.

For California residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, to request access to and deletion of it, to correct inaccurate information, and to not be discriminated against for exercising these rights.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. We do not knowingly collect or sell the personal information of anyone under 16. In the past 12 months, we have collected the categories of information described in Section 2 and disclosed information to the service providers described in Section 7 for the business purposes described in Section 3. To exercise your California rights, contact us at legal@ezfiledrop.com. You may use an authorized agent to make a request on your behalf.

11. Children’s privacy

The Service is intended for business use and is not directed to children. You must be at least 16 to use the Service, and if you are under 18 you may use it only with the consent and involvement of a parent or legal guardian. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. If we make a material change, we will take reasonable steps to notify you, such as posting a notice on this page or emailing you. The “last updated” date above shows when the current version took effect. We encourage you to review this page periodically.

13. Contact us

If you have questions about this policy or how we handle your information, contact:

Jungle Ventures Group LLC, dba EZ File Drop 7172 Regional Street, #506 Dublin, CA 94568 legal@ezfiledrop.com