Last Updated: August 8, 2026
This Privacy Policy explains how DAT Drives ("DAT Drives," "Company," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the DAT Drives website, platform, and related services (collectively, the "Service"). This Policy applies to registered users of the Service ("Users," "you") and to individuals who interact with a gallery shared by a User ("Client End-Users"). By using the Service, you agree to the practices described in this Policy. Terms not defined here have the meaning given in our Terms of Service.
1. Information We Collect
1.1 Account Information. When you register, we collect your name, email address, and billing information. Payment card details are collected and stored by Stripe, our payment processor — DAT Drives does not store full payment card numbers on its own servers.
1.2 User Content. We store the photos, videos, and other files you upload to the Service. This content remains your property and is stored solely to provide the Service, as further described in our Terms of Service.
1.3 Usage Data. We collect technical and behavioral data about how you use the Service, including login timestamps, IP address, device and browser information, pages visited, uploads performed, and galleries created. We use this data to operate, secure, and improve the Service.
1.4 Client End-User Data. When a Client End-User accesses a gallery or completes a payment, we collect their email address and transaction information. This data is collected and used solely to facilitate delivery of the applicable gallery and processing of the applicable payment, on your instruction as the User who created the gallery.
1.5 Cookies and Similar Technologies. See Section 9.
2. Legal Bases for Processing (EEA/UK Users)
Where the General Data Protection Regulation ("GDPR") applies, we process personal data under the following legal bases: (a) performance of a contract, to provide the Service you've signed up for; (b) legitimate interests, to secure, maintain, and improve the Service, provided those interests are not overridden by your rights; (c) legal obligation, where processing is required to comply with applicable law; and (d) consent, for optional cookies and any marketing communications, which you may withdraw at any time.
3. How We Use Your Information
We use collected information to: provide, maintain, and improve the Service; process payments and manage billing; send transactional communications (receipts, delivery notifications, security and account alerts); respond to support requests; detect, investigate, and prevent fraud, abuse, and security incidents; enforce our Terms of Service; and comply with legal obligations. We do not sell your personal information, and we do not use your uploaded files to train machine learning models or for any purpose beyond providing the Service.
4. How We Share Your Information
We disclose personal information only as follows:
- Service Providers. We share information with vendors who help operate the Service, currently including Stripe (payment processing) and OVHcloud (cloud storage infrastructure). These providers are contractually bound to process data only as needed to perform their services and are prohibited from using it for their own purposes.
- Your Clients. When you share a gallery link, the Client End-User can access the gallery content you've made available to them. We do not share your account information with your Client End-Users beyond what is necessary to complete their transaction.
- Legal Requirements. We may disclose information where required by law, subpoena, court order, or valid governmental request, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers. If DAT Drives is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
- With Your Consent. We may share information for any other purpose disclosed to you at the time of collection, with your consent.
We do not sell or share personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA").
5. Data Storage, Security, and Breach Notification
Files and account data are stored on OVHcloud's secure infrastructure. We implement encryption in transit (TLS) and encryption at rest, and access to files is restricted to authenticated, payment-gated links. Despite these measures, no method of transmission or storage is completely secure, and we cannot guarantee absolute security, consistent with the disclaimers in our Terms of Service.
In the event of a data breach affecting your personal information, we will notify affected Users without undue delay and in accordance with applicable law, and will provide information reasonably necessary for you to protect yourself, to the extent required.
6. Data Retention
We retain account information and User Content for as long as your account remains active. If you cancel your account, your files are retained for thirty (30) days to allow for export, after which they are permanently deleted. Client End-User transaction data is retained for as long as necessary to comply with financial record-keeping obligations, typically seven (7) years. We retain other personal information only as long as reasonably necessary for the purposes described in this Policy, or as required by law.
7. Your Privacy Rights
7.1 General Rights. Depending on your location, you may have the right to: access a copy of personal data we hold about you; correct inaccurate or incomplete data; delete your personal data, subject to legal retention requirements; port your data in a machine-readable format; object to certain processing, including processing based on legitimate interests; and restrict processing in certain circumstances.
7.2 California Privacy Rights (CCPA). If you are a California resident, you additionally have the right to: know what categories of personal information we collect, use, and disclose; request deletion of personal information, subject to exceptions; correct inaccurate personal information; and opt out of the sale or sharing of personal information — though as stated in Section 4, DAT Drives does not currently sell or share personal information as those terms are defined by the CCPA. We will not discriminate against you (including by denying service, charging different prices, or providing a different quality of service) for exercising any of these rights.
7.3 EEA/UK Rights. If GDPR applies to you, you additionally have the right to lodge a complaint with your local data protection supervisory authority. Where we transfer personal data outside the EEA or UK, we rely on appropriate safeguards, such as Standard Contractual Clauses, to protect that data.
7.4 Nevada Residents. Nevada residents may submit a request directing us not to sell covered information, as defined under Nevada law. As stated above, we do not sell personal information.
7.5 How to Exercise Your Rights. To exercise any of these rights, contact us using the information in Section 15. We may need to verify your identity before fulfilling a request, and you may designate an authorized agent to submit a request on your behalf, subject to verification. We will respond within the time required by applicable law (generally thirty (30) days).
8. Sensitive Personal Information
DAT Drives does not intentionally collect Social Security numbers, government ID numbers, precise geolocation, health information, or other categories of "sensitive personal information" as defined by applicable law, beyond what Stripe collects directly to process payments under its own privacy practices. If your uploaded content incidentally contains sensitive information (for example, images of individuals), you are responsible for ensuring you have the right to upload and share that content.
9. Cookies and Tracking Technologies
We use the following categories of cookies: essential cookies, required for the Service to function and which cannot be disabled; analytics cookies, which help us understand usage patterns and which you may opt out of without affecting core functionality; and preference cookies, which remember your settings between sessions. You can manage cookie preferences through your browser settings. We do not currently respond to browser "Do Not Track" signals, as no common industry standard for such response has been adopted.
10. Children's Privacy
The Service is not directed to individuals under the age of 18 and is not intended for use by children. We do not knowingly collect personal information from children under 13 (or the relevant minimum age in your jurisdiction). If we become aware that we have collected personal information from a child without verified parental consent, we will take reasonable steps to delete it.
11. International Data Transfers
DAT Drives operates internationally and works with service providers in multiple countries. If you are located outside the country where our infrastructure is based, your information may be transferred to and processed in a country with different data protection laws than your own. Where required, we implement appropriate safeguards — such as Standard Contractual Clauses — to protect personal data transferred internationally.
12. Data Processing Agreements for Business Customers
If you are a studio, agency, or other business customer that processes personal information of your own clients or team members through the Service in a manner requiring a data processing agreement under applicable law, contact us to request a DAT Drives Data Processing Addendum.
13. Automated Decision-Making
DAT Drives does not use your personal information to make decisions that produce legal or similarly significant effects through fully automated means without human involvement.
14. Third-Party Links and Services
The Service may link to or integrate with third-party websites or services, including Stripe's own payment pages. This Policy does not apply to those third parties, and we encourage you to review their privacy policies independently. We are not responsible for the privacy practices of any third party.
15. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by email or by posting a notice on the Service, along with an updated "Last Updated" date. Your continued use of the Service after the effective date of an update constitutes acceptance of the revised Policy.
16. Contact Us
Questions about this Privacy Policy, or requests to exercise your privacy rights, may be directed to:
DAT Drives 312 NE 16th Terr Fort Lauderdale, FL 33301 Phone: (877) 557-3223 Email: via the Contact page