Skip to content

Privacy Policy

Original document

LAST VERIFIED 2026-10-01

Attention points

12 TO CHECK

Pointers to disclosures this policy may not clearly make, checked against major privacy laws. This is a heuristic — not legal advice, and not a finding that anything is missing or unlawful.

GDPR / UK-GDPR

6/13 ADDRESSED
  • The legal basis for using your dataGDPR Art. 13(1)(c)
  • Legitimate interests relied on (where that is the basis)GDPR Art. 13(1)(d)
  • Your data-subject rights (access, erasure, portability, object, …)GDPR Arts. 13(2)(b), 15–21
  • The right to withdraw consent (where consent is the basis)GDPR Art. 13(2)(c)
  • Whether providing your data is required, and what happens if you don'tGDPR Art. 13(2)(e)
  • Automated decision-making or profilingGDPR Arts. 13(2)(f), 22
  • Where your data was obtained, if not collected from you (source)GDPR Art. 14(2)(f)

CCPA / CPRA

5/10 ADDRESSED
  • A 'Do Not Sell or Share My Personal Information' option (if it sells/shares)CCPA §1798.135(a)
  • A 'Limit the Use of My Sensitive Personal Information' option (CPRA)CPRA §1798.135(a)
  • Your CCPA rights (know, delete, correct, opt-out, limit, non-discrimination)CCPA §§1798.100–125
  • A non-discrimination promise for exercising your rightsCCPA §1798.125
  • At least two ways to submit a request, plus a contactCCPA §1798.130

Current text

Skip to main content Legal - Terms of Service - Privacy Policy - Business Agreement - DMCA Policy - Acceptable Use - Open Source - Terms of Service - Privacy Policy - Business Agreement - DMCA Policy - Acceptable Use - Open Source Dropbox's Privacy Policy will be changing effective January 1, 2027. Click here to review. If your organization signed a Dropbox Business, Dropbox Services, or Dropbox Enterprise Agreement with Dropbox, that Agreement may have modified the privacy…

Show full text