Privacy Policy

Last updated: April 2026

CloudShelve ("we", "our", or "us") is a product of SHELVELABS TECHNOLOGIES (OPC) PRIVATE LIMITED (CIN: U62012KA2026OPC220088), a company incorporated on 29th April 2026 under the Companies Act, 2013. This Privacy Policy explains how we collect, use, and protect your information when you use the CloudShelve mobile application and website.

1. Information We Collect

We collect the following types of information:

• Account information: Email address and name when you sign up.
• Cloud provider credentials: OAuth tokens for Google Drive, Dropbox, OneDrive, Box, and MEGA. We never store your cloud passwords — only encrypted access tokens.
• Usage data: File operation logs, scan history, and job schedules needed to provide the service.
• Payment information: Subscription status managed by Apple App Store / Google Play Store and RevenueCat. We do not store payment card details.
• Device information: Device type and OS version for troubleshooting.

2. How We Use Your Information

• To provide and operate the CloudShelve service.
• To authenticate you with connected cloud providers.
• To process subscription payments and grant plan features.
• To send transactional emails (account confirmation, password reset).
• To improve the app based on usage patterns.

3. Third-Party Services

We use the following third-party services, each with their own privacy policies:

• Supabase — authentication and database hosting.
• RevenueCat — subscription management and purchase validation.
• Google Drive API — file access for connected Google accounts.
• Dropbox API — file access for connected Dropbox accounts.
• Microsoft Graph API (OneDrive) — file access for connected Microsoft accounts.
• Box API — file access for connected Box accounts.
• MEGA SDK — file access for connected MEGA accounts.
• Railway — backend hosting infrastructure.

4. Data Storage and Security

All cloud provider credentials are encrypted with AES-256 before storage. Your data is stored on Supabase infrastructure hosted in secure data centres. We use HTTPS/TLS for all data in transit.

5. Data Retention

We retain your account data for as long as your account is active. You may delete your account at any time via the app (Profile → Account Settings → Delete Account) or by contacting us at support@cloudshelve.com. Upon deletion, all your data is permanently removed within 30 days.

6. Your Rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act 2023, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Erase your personal data.
• Withdraw consent at any time.
• Nominate a person to exercise these rights on your behalf.

To exercise any of these rights, contact us at legal@cloudshelve.com.

7. Children's Privacy

CloudShelve is not intended for children under 13. We do not knowingly collect personal data from children.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the app after changes constitutes acceptance.

9. Contact

SHELVELABS TECHNOLOGIES (OPC) PRIVATE LIMITED
CIN: U62012KA2026OPC220088
C-3135, Tower-C, Global Techies Town,
Bommasandra Industrial Estate, Bangalore South,
Bangalore – 560099, Karnataka, India

Legal: legal@cloudshelve.com
Support: support@cloudshelve.com
Phone: +91 90190 95052