Dropbox

Dropbox says data sent to third-party AI partners is not used to train those partners' internal models.

AI partner processing is tied to actively using AI-powered Dropbox features rather than all stored files at all times.

Dropbox says its AI and algorithmic analysis is not used in a way that produces legal or similarly significant effects.

Managed accounts can still place AI use under team-level governance rather than leaving every choice purely to individuals.

Dropbox still uses machine learning and AI to improve services and develop new features.

Dropbox may manually review Dash Answers questions and responses in some cases.

Shared-content analytics can expose viewer identity, device information, and access behavior to content owners.

Recipients of shared content may use that content with third-party generative AI tools outside Dropbox's control.

Trusted third parties, other Dropbox companies, legal requests, and connected apps still create multiple disclosure paths.

Dropbox says it remains responsible for how processors handle transferred personal data.

Advanced sharing controls such as password protection, expiration dates, and revocation help narrow who can reach files.

Dropbox says Google API data shared through integrations follows Google's limited-use requirements.

Dropbox publicly says it does not sell user data.

Dropbox uses cookies and pixel tags to provide, improve, protect, and promote its services.

Viewer analytics can collect device identifiers, email addresses, and IP addresses when shared content is viewed.

Dropbox uses machine learning and algorithmic analysis to provide, improve, protect, and promote services.

Dropbox offers account privacy settings and marketing preference controls.

Dropbox says it never sells user data.

Dropbox is mainly a storage product rather than an ad-network-style consumer platform.

Deleting a Dropbox account initiates deletion of stored files after 30 days.

Dropbox clearly documents plan-based file recovery windows instead of hiding them in vague lifecycle language.

Users can request deletion, submit access requests, and manage account information directly.

Account settings let users update or delete some stored information without waiting on support.

Dropbox says it retains information as long as the account exists or as long as it needs the data to provide services.

Team policies and longer recovery windows can keep content available well after a user expects it to be gone.

Users can access, amend, download, and delete personal information from account settings.

Dropbox supports formal access and deletion requests for both some account and non-account data.

Advanced sharing controls let users revoke access, add passwords, and set expiration dates on shared items.

Users can keep files directly on local devices and download individual files or folders from the web.

Team administrators may still access and control managed Dropbox team accounts.

Some privacy outcomes still depend on request forms, account type, and team configuration.