⚡
DropHeavy
Vault ↗
← Back to DropHeavy
PRIVACY & DATA PROTECTION Effective Date: October 14, 2026 · Version 2026-10-14-v1

Privacy Policy

DropHeavy is committed to protecting your personal data, raw video privacy, and digital rights in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act), the European Union GDPR, and applicable international data protection standards.

1. Principles of Our Zero-Knowledge Storage Engine

DropHeavy is engineered specifically for videographers and mobile creators who value maximum data privacy:

🔒 No Content Ad-Profiling: We do not scan your footage for ad targeting, AI model scraping, facial recognition, or commercial behavioral tracking.
⚡ Lossless Transmission: Your videos are streamed directly to and from encrypted distributed edge object storage with zero recompression or alteration.

2. Personal Data We Collect

  • Account Identifiers: Your email address, used solely to deliver passwordless 6-digit login codes (OTPs) and account notifications.
  • Media Vault Metadata: Filenames, file sizes (in bytes), MIME types, and upload timestamps. We use this metadata to display your Media Vault cards and calculate storage quota consumption.
  • Legal Consent Audit Trail: In accordance with Section 6 of the DPDP Act 2023 and Article 7 of GDPR, we maintain a secure, immutable log of your consent. Each time you authenticate, we log: (i) your verified email, (ii) exact version of Terms and Privacy accepted, (iii) timestamp, (iv) IP address, and (v) browser user-agent.
  • Billing & Transaction History: Records of prepaid pass activations and transaction amounts. Payment card processing is handled entirely by PCI-DSS Level 1 compliant gateways (e.g., Lemon Squeezy, Paddle, Stripe); DropHeavy never sees or stores full credit card numbers or CVVs.
  • Telemetry: Real-time transfer speed metrics calculated locally in your browser for bandwidth monitoring.

3. How We Protect Your Media

We implement rigorous technical and organizational safeguards to ensure confidentiality, integrity, and availability of your data:

• Encryption in Transit: All HTTP interactions enforce TLS 1.3 / HTTPS encryption.

• Encryption at Rest: Video slices are encrypted using AES-256 standard encryption on high-security distributed cloud storage nodes.

• Signed Presigned URLs: Downloads and chunk uploads use short-lived, cryptographically signed URLs to prevent unauthorized sniffing.

• Browser Sandboxing: Resumable chunks stored locally on your device utilize browser IndexedDB storage accessible only within your authenticated session origin.

4. Your Rights Under DPDP Act 2023 & GDPR

Regardless of your physical location, we grant all users the following fundamental privacy rights:

Right to Access & Portability: You can view all vaulted files and download your original raw bitstream anytime via the Media Vault dashboard without egress penalties.
Right to Erasure (Deletion): You have direct control to delete any video file. Clicking "Delete" immediately purges the corresponding storage key from cloud object storage and marks the database record as deleted.
Right to Account Closure: To permanently delete your entire account and all associated telemetry, send a request to contact@dropheavy.com and we will complete the purge within 7 business days.

5. Third-Party Service Providers

We do not sell, rent, or trade your personal information. We partner only with reputable global cloud and payment infrastructure providers that maintain strict confidentiality agreements:

  • Cloud Infrastructure Providers: Global CDN edge network, distributed object storage, and encrypted transactional databases.
  • Payment Processors (Lemon Squeezy / Paddle / Stripe): Secure transaction verification and tax compliance.
  • Transactional Email Services: Secure delivery of 6-digit one-time access codes and billing receipts.

6. Data Protection & Grievance Officer

In compliance with the Digital Personal Data Protection Act, 2023 (India) and Rule 3(2) of the IT Rules 2021, you may contact our designated Grievance & Data Protection Officer for any inquiries, rights requests, or concerns:

Attention: Data Protection & Grievance Officer

Organization: DropHeavy

Official Inquiries Email: contact@dropheavy.com

Location: India (Serving Users Globally)

Resolution SLA: Response within 24–48 business hours.

Privacy Concerns: contact@dropheavy.com © 2026 DropHeavy. All rights reserved.