Privacy Policy

Effective September 16, 2026

This policy explains what NevTan Drive collects, what it does with it, and what you can do about it. NevTan Drive is operated by NevTan, Inc. (“NevTan”, “we”, “us”, “our”).

1. Information we collect

We collect three kinds of information.

• Account information — the name and email address on your NevTan account, and which NevTan apps it has access to. Drive does not hold your password: sign-up, verification and credentials are handled by NevTan single sign-on, and the same account identity is used across the suite.
• Files and folders you upload — the file itself, its name, size, type, and the folder structure you place it in. Individual files can be up to 100 MB.
• Activity related to your files — uploads, renames, moves, deletions, shares, permission changes, and access events. Much of this is shown back to you in each file’s own audit log.

We also record ordinary technical information that any web service receives: IP address, browser and device type, and timestamps. This is used for security, abuse prevention, and diagnosing faults.

2. How we use your information

• To provide the service: storing your files, rendering previews, running the editors, and delivering shared files to the people you share them with.
• To operate your account: signing you in, keeping your session valid across NevTan apps, and resetting your password when you ask.
• To measure and enforce storage limits, which are shared with your NevTan Mail mailbox.
• To keep the service secure: detecting abuse, investigating suspected breaches of these policies, and complying with the law.
• To contact you about the service — for example a password reset, a share notification, or a material change to this policy.

We do not sell your personal information, and we do not use the contents of your files to target advertising.

3. Your files and how they are processed

Your files are yours. We store and process them in order to run the features you use, and for no other purpose.

Most of what Drive does to a file happens in your browser, on your own machine, and not on our servers. Rendering previews and page thumbnails, editing and annotating PDFs, converting a PDF to Word or Excel, and turning images into a PDF are all performed locally — the file is not sent anywhere to do them.

One feature works differently. Text recognition (OCR) on scanned or image-only PDFs runs on our servers, because it needs more computing power than a browser can reliably provide. The page images are processed to extract their text, and the recognised text is stored against your own file in your own account.

That processing is automated and is performed only to return the result you asked for. Staff do not access the contents of your files except where you explicitly ask us to in support, or where we are required to by law.

4. Sharing and access controls

When you share a file, you decide who can reach it. A file is private to your account until you share it.

• Named collaborators are invited by email address and given a Viewer, Commenter, or Editor role. Inviting someone tells them your name and the file name.
• Share links carry a token in the URL. Anyone holding a valid link can open the file within the limits you set, so treat a link as you would the file itself.
• You can set a link to expire on a date, protect it with a password, or turn off downloading so the file can only be read in the browser, and you can revoke it at any time.
• Every share, permission change, and access event is written to the file’s audit log, visible to the file’s owner.

Files and folders in Drive, and the app routes that display them, are excluded from search-engine indexing.

5. Data storage and security

Files are transmitted over TLS and stored on infrastructure operated for NevTan. Access to production systems is restricted to personnel who need it to run the service. Account passwords are held by NevTan single sign-on rather than by Drive; where you put a password on a share link, Drive stores it hashed and never in plain text.

No online service can promise perfect security. If we become aware of a breach affecting your data, we will notify you as required by applicable law.

6. Data retention

• Files you delete move to Trash and remain recoverable, and continue to count against your storage, until you delete them permanently or empty Trash.
• Permanently deleted files are removed from active systems, and from routine backups within a reasonable period thereafter.
• If you close your account, your files are deleted. Records we are required to keep for legal, tax, or security reasons are retained for as long as the law requires.

7. Third-party services

• Payments for NevTan storage plans are processed by Stripe, Inc. and billed through NevTan Mail. We do not store your full card details. Your payment information is governed by Stripe’s own terms and privacy policy.
• Analytics are collected through Google Tag Manager, which loads on every page of this site — the public marketing and documentation pages and the signed-in file workspace alike — to understand which pages are used. It records page views and interactions with the interface. It does not read the contents of your files.
• Other NevTan apps — Mail, Sign, Cloud, Engage, Calendar, Keep, and Tasks — share your account identity and, in Mail’s case, your storage quota.

8. Cookies

We use cookies and equivalent browser storage to keep you signed in, to maintain your session across NevTan apps, and to remember interface preferences. Analytics cookies are used on public pages as described above. Blocking essential cookies will prevent sign-in from working.

9. Your rights and choices

• Access and export — you can download any file you hold in Drive at any time.
• Correction — you can edit your account details from your NevTan account settings.
• Deletion — you can delete individual files permanently, or ask us to close your account and delete your data.
• Objection and restriction — depending on where you live, you may have the right to object to or restrict certain processing.

To exercise any of these, write to support@nevtan.com.

10. Children’s privacy

NevTan Drive is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

11. International transfers

NevTan, Inc. operates from the United States, and your information may be processed there or in any other country where we or our service providers operate. Where required, we rely on appropriate safeguards for such transfers.

12. Changes to this policy

We may update this policy as the service changes. The effective date above always reflects the current version, and we will give notice of material changes through the service or by email.

13. Contact us

Questions about this policy, or about your data, go to support@nevtan.com — the same support desk that covers every NevTan product.