Privacy Policy — GenZx ID (9Drive)

Last updated: 1 October 2026

This Privacy Policy explains how GenZx ID ("we", "us") handles information when you use 9Drive at https://9drive.genzx.id.

1. Information we collect

• Account data: name, email address, and password hash (passwords are hashed with Argon2; we never store plain passwords).
• Google account data: if you connect Google Drive, we store encrypted OAuth access/refresh tokens and your Drive quota metadata (total/used/free bytes). Tokens are encrypted at rest (AES-256-GCM).
• Files: files you upload are streamed to your own Google Drive account (or your own S3-compatible storage). We do not keep file contents on our servers.
• Usage data: audit logs (actions such as upload, delete, share) needed for the activity feature and security.

2. How we use it

• To provide the storage dashboard: upload, organize, preview, share, and quota tracking.
• To authenticate you and protect the service (session management, rate limiting, abuse prevention).

3. Google API disclosures

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Sharing

We do not sell your personal data. Data is processed only by infrastructure operators needed to run the service (hosting/database) and only to the extent required to operate it.

5. Retention & deletion

Data is kept while your account exists. You can disconnect a Google account and delete your files from Settings at any time. To request full account deletion, contact us.

6. Security

HTTPS in transit, encrypted tokens at rest, hashed sessions/API keys, and server-side access control. No system is 100% secure, but we minimize data stored.

7. Children

The service is not directed to children under 13.

8. Changes

We may update this policy; the latest version always appears on this page.

9. Contact

Questions: andrik@genzx.id