Dropbox Foundation Privacy Policy

Posted: June 8, 2020

The Dropbox Charitable Foundation (“Dropbox Foundation”) focuses on promoting and protecting human rights.  We partner with human rights organizations (“Dropbox Foundation Partners”) around the world to help them meet their goals.

This Privacy Policy describes how we collect, use, and handle your personal data when you use our websites and services (“Services”).  

What & Why

We collect and use the following information to provide, improve, protect, and promote our Services.

Your information. We collect information you provide us when you visit our website and sign up to receive email updates, including your name, email address, and organization name. We also use information provided by Dropbox Foundation Partners so that we can partner with them and provide them support.

Cookies and other technologies. We use technologies like cookies and pixel tags to provide, improve, protect, and promote our Services. Cookies are small data files sent to your browser when you visit a site. A pixel tag is a small piece of code that can be embedded on websites and emails. For example, we use cookies and pixels to learn how you interact with our websites and emails to improve and promote our Services. You can set your browser to not accept cookies. Our systems currently don’t respond to DNT:1 signals from browsers visiting our website, but the Dropbox Foundation adheres to the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising (“Principles”). You can opt out of collection of information by third-parties that adhere to the Principles by visiting www.aboutads.info/choices.  

Device information. We collect information from and about the devices you use to access our websites. This includes things like IP addresses and the type of browser and device you use.

Marketing. When you sign up to receive email updates, we may send you information about our Services via email. You can opt out of these marketing emails at any time by clicking the “Unsubscribe” link in the email.

Bases for processing your data. We process the personal data described above (1) in furtherance of our legitimate interests in operating our Services; and (2) with your consent.  We may process and disclose your information to third parties if we determine that such disclosure is reasonably necessary to: (a) comply with any applicable law, regulation, legal process, or appropriate government request; (b) protect any person from death or serious bodily injury; (c) prevent fraud or abuse of our Services; (d) protect the Dropbox Foundation’s rights, property, safety, or interest; or (e) perform a task carried out in the public interest.

Examples of how we process your personal data in furtherance of our legitimate interest in operating our Services include understanding how you use our services so that we can improve and promote them.

Examples of how we process your data with your consent include sending you marketing emails about the Dropbox Foundation, and collecting feedback from you.

With Whom

We may share information as discussed below, but we won’t sell it to advertisers or other third parties.

Others working for and with us.  We use trusted third parties (for example, advisory services) for the purposes of helping us provide, improve, protect, and promote our Services. These third parties access your information to perform tasks on our behalf, and we’ll remain responsible for their handling of your information per our instructions.

Trusted third parties include:  

• Dropbox, Inc.
• Google LLC
• Rockefeller Philanthropy Advisors
  

Dropbox Companies.  The Dropbox Foundation shares infrastructure, systems, and technology with Dropbox, Inc. and Dropbox International Unlimited Company (the “Dropbox Companies”) to provide, improve, protect, and promote our Services. We process your information across the Dropbox Companies for these purposes, as permitted by applicable law and in accordance with their terms and policies.

How

Security.  We make reasonable efforts to secure the information we collect. For example, we maintain organizational and technical safeguards to protect information against unauthorized access and use.

Retention. We retain the information we collect for as long as necessary to provide our Services to you.  We may also retain this information if necessary to comply with our legal obligations, resolve disputes, or enforce our agreements.

Where

If you provide your data to the Dropbox Foundation via our websites or other means, we may store, process and transmit information in the United States and locations around the world—including those outside your country. Data may also be stored locally on the devices you use to access the Services.

Your Control and Access of Your Data

You have control over your personal data and how it’s collected, used, and shared.  

Change, delete, access, and take your personal data elsewhere.  You can request that we: (1) provide you with a copy of your personal data, (2) update it, and (3) delete it. You can do so by contacting privacy@dropbox.com.

Object to or restrict the processing of your personal data. Depending on the processing activity, you can request that we stop or limit processing of your personal data by contacting us at privacy@dropbox.com.

Changes

If we’re involved in a reorganization, merger, acquisition, or sale of our assets, your data may be transferred as part of that deal. We’ll notify you (for example, via a message to the email address you provided to us) of any such deal and outline your choices in that event.

We may revise this Privacy Policy from time to time, and will post the most current version on our website. If a revision meaningfully reduces your rights, we will notify you.

Contact

Have questions or concerns about the Dropbox Foundation and privacy? Contact us at privacy@dropbox.com.