How Dropvi protects your files

• •Each transfer gets a new random key, made in your browser or by the command-line tool. Files and their details are encrypted with AES-256-GCM using keys derived from it.
• •Dropvi stores only the encrypted data. Cloudflare, which stores it, also encrypts stored files and our database at rest with AES-256.
• •Uploads, downloads and sign-in requests travel to our API over HTTPS, which encrypts them in transit with TLS.

• •The key is part of the share link, after the # sign. Browsers do not send that part of a link to Dropvi, so Dropvi never receives the key.
• •Anyone with the full link can open the transfer until it expires. Without the key, the download page shows the number and size of the files, the expiry date, the download count and limit, and the sender’s branding if they have a workspace, but no file names or contents.
• •On Business Pro and above you can add a PIN, which also becomes part of the key, so the link alone is not enough to open the files.
• •When you send from the website, your browser keeps each transfer’s key in its own storage so that your dashboard can show the file names. The keys never leave your browser.
• •If you lose the key, Dropvi cannot recover it.

Dropvi can see

• •Recipients’ email addresses, because Dropvi sends the emails.
• •The number of files, their sizes, and when the transfer was created, finished uploading, expires and was deleted, because Dropvi needs them to deliver and delete transfers.
• •Which account sent a transfer, if you were signed in, its email address, and the settings you chose, such as the expiry and any download limit.
• •For each download or preview: the time, the country Cloudflare associates with the connection, the browser’s user agent and a keyed hash of the IP address.
• •Where a transfer came from: the link label in the address you arrived at, or the domain of the website that linked to Dropvi, never the address of the page.
• •For a branded workspace: its subdomain, name, logo, headline and colours, which anyone can see on the workspace.

Dropvi cannot see

• •The files themselves.
• •File names and types, the title, the message and the sender name.
• •The key, which is in the link after the # sign, unless someone gives Dropvi the full link, for example in the optional Full link field of a report.

The privacy notice lists everything Dropvi records. Because Dropvi cannot see what a transfer contains, it does not scan files. Reports of misuse are handled as theterms of service describe.

• •Dropvi receives a PIN or password when you set it and when a recipient enters it, and stores it only as a hash. New PINs and passwords are hashed with salted PBKDF2 (SHA-256, 50,000 iterations). Ten wrong attempts lock the transfer for 15 minutes.
• •On paid plans you can also set a download limit.
• •Upload keys and deletion keys are stored only as SHA-256 hashes. Sign-in codes are stored as keyed hashes, and the IP addresses in our download and report records only as keyed hashes.

• •You sign in with a one-time code sent to your email address. Before a code is sent, the sign-in form runs a Cloudflare Turnstile check, and our API sends no code if the check fails or cannot be confirmed with Cloudflare.
• •To slow down misuse, Dropvi counts recent requests over one-minute periods: by IP address (for IPv6, each /64 network), by email address for sign-in, and by account for transfers and replies sent while signed in.

• •The sender chooses when a transfer expires: from 1 to 7 days on the free plan, or up to 365 days on a paid plan. Its files are deleted from storage at the first hourly clean-up after it expires.
• •Revoking a transfer deletes its files straight away. You can revoke from the dashboard when signed in, or from the browser you sent it from without an account.
• •The record of a transfer, without its files, is deleted 365 days after the transfer ends, unless a report about it is still open. The privacy notice lists how long everything is kept.

The website runs code that dropvi.com sends to your browser, so this protection depends on that code: code changed at dropvi.com could send keys elsewhere. If you prefer not to rely on that, theDropvi command-line tool encrypts and decrypts on your own computer, at the version you install.

Anyone you give the full link to, or who finds it, can open the transfer until it expires or you revoke it, unless it has a PIN or password.

If you find a security problem in Dropvi, email info@dropvi.comwith the details.