Privacy Policy

Who processes your data

CloudVault is built and operated by NextTool, which acts as the data controller. You can reach us at info@nexttool.app about anything on this page.

We never receive your file contents

This is the most important point. The contents of your backed-up files are never sent to our servers. The desktop app uploads them straight into your own Google Drive account. We are not in the middle of that transfer and we cannot read your files.

Our server only keeps an index so you can check on your backup: file name, size, folder path, modification date and whether it has been backed up. The file itself is not there.

What we do collect

Account details: your email address, your name, and an irreversible hash of your password. If you sign in with a social account, no password is ever created.

Device details: the name, operating system and last-seen time of each computer running CloudVault. This lets you see your devices and lets us apply your plan's device limit.

File index: the metadata described above.

Subscription state: when your trial started, which plan you are on, and until when.

Technical logs: server records such as IP address and request time, kept for troubleshooting and abuse prevention.

Signing in with a social account

If you choose to sign in with Google, Apple or GitHub, we receive exactly three things from that provider: your email address, your display name, and the identifier of your account with them.

We do not request or receive your contacts, posts, photos or friend list, and we never post anything on your behalf.

If you use Apple's "Hide My Email" option, your account is created with the relay address Apple generates and we never see your real address.

Google Drive access

CloudVault connects to Google Drive using the drive.file scope only. That scope allows an app to see and manage only the files it created itself.

The rest of your Drive — your other documents, photos and folders — stays closed to CloudVault, and Google enforces this technically. Backed-up files live in your own storage and remain yours through your own account.

Who we share data with

We do not sell your data and we do not hand it to anyone for marketing.

Only three parties are involved in making the service work: Google Drive, where your files are stored; the sign-in provider you chose; and the data centre that hosts our server.

If we are legally required to disclose information, we share only what the request actually covers.

Cookies

We only use cookies the service needs to function: one to keep you signed in, one to protect forms against forgery, and one to remember your language.

There are no advertising or tracking cookies and no third-party analytics.

How long we keep it

Account and index data is kept for as long as your account exists. When you delete your account it is permanently erased within 30 days.

Technical logs are kept for at most 90 days.

Your rights

You have the right to access, correct, delete and receive a copy of the data we hold about you. Write to info@nexttool.app and we will respond within 30 days at the latest.

The Data Deletion page walks through removing your account step by step.