Privacy Policy

Last Updated: July 24, 2026

1. INTRODUCTION

Aestora ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cloud storage service available at cloud.aestora.cc (the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. INFORMATION WE COLLECT

2.1 Information You Provide to Us:

Account Information: When you create an account, we collect your name, email address, and authentication credentials.

User Content: Files, documents, images, videos, and other data you upload, store, and share through our Service. (Not accessable by even the founders)

Communications: Information you provide when contacting our support team, including email correspondence and support tickets.

Profile Information: Display name, avatar, and any other information you choose to add to your profile.

2.2 Information Collected Automatically:

Usage Data: IP address, browser type and version, device type, operating system, pages visited, time and date of visits, and time spent on pages.

Cookies and Tracking: We use essential cookies for authentication and security purposes. See our Cookie Policy for details.

File Metadata: File names, sizes, types, upload dates, modification dates, and folder structures.

Performance Data: Upload/download speeds, error logs, and service performance metrics.

3. HOW WE USE YOUR INFORMATION

We use the collected information for the following purposes:

Service Delivery: To provide, maintain, and improve the Service, including file storage, sharing, and delivery.

Account Management: To manage your account, process registrations, and provide customer support.

Security: To detect, prevent, and address fraud, unauthorized access, and other illegal activities.

Communication: To send administrative messages, updates, security alerts, and respond to your inquiries.

Analytics: To analyze usage patterns and trends to improve user experience and service performance.

Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. DATA STORAGE AND SECURITY

4.1 Storage:

Files are stored using Pixeldrain's secure infrastructure with encryption at rest.

Account data is stored on secure Firebase servers with access controls.

All data transmission uses HTTPS encryption (TLS 1.3).

4.2 Security Measures:

Industry-standard encryption for data in transit and at rest.

Regular security assessments and monitoring.

Access controls and authentication requirements.

Secure password hashing using bcrypt.

Two-factor authentication availability.

4.3 Data Breach Response:

In the event of a data breach, we will notify affected users within 72 hours of discovery and take immediate steps to mitigate any potential harm.

5. DATA RETENTION

5.1 Retention Periods:

Account Data: Retained while your account is active.

Files: Retained according to your membership plan:

- Free: 30 days from upload date

- Pro: 60 days from upload date

- Exclusive: Unlimited retention

Usage Logs: Retained for 90 days for security and analytics.

5.2 Account Deletion:

You can delete your account at any time from Settings.

Upon deletion, all personal data and files are permanently removed within 30 days.

Some data may be retained for legal compliance or legitimate business purposes.

6. DATA SHARING AND DISCLOSURE

6.1 We Do Not Sell Your Data:

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6.2 Service Providers:

We share information with trusted third-party service providers who assist us in operating the Service:

Pixeldrain: File storage and delivery infrastructure

Firebase (Google): Authentication, database, and hosting

Resend/SMTP: Email delivery services

6.3 Legal Requirements:

We may disclose information if required by law, court order, or government regulation.

6.4 Business Transfers:

In the event of a merger, acquisition, or asset sale, your data may be transferred as part of the transaction.

7. YOUR RIGHTS

You have the following rights regarding your personal data:

Access: Request access to your personal data we hold.

Correction: Update or correct inaccurate information.

Deletion: Request deletion of your account and associated data.

Portability: Export your data in a portable format.

Objection: Object to processing of your personal data.

Withdrawal: Withdraw consent at any time.

To exercise these rights, contact us at supportaestora@gmail.com.

8. CHILDREN'S PRIVACY

Our Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

9. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

10. CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). Contact us for more information about exercising these rights.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. We will notify you of material changes by:

Posting the updated policy on this page

Sending an email notification to registered users

Displaying a notice in the Service

Continued use of the Service after changes constitutes acceptance of the updated policy.

12. CONTACT INFORMATION

For questions, concerns, or to exercise your privacy rights:

Email: supportaestora@gmail.com

Website: https://cloud.aestora.cc

Response Time: Within 48 hours

Aestora

Privacy Compliance Team