Introduction

Welcome to Echo Files. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our file management and storage service.

By using Echo Files, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

Information We Collect

Personal Information

When you register for an account, we collect the following information:

• Account Information: Name, email address, and password (encrypted)
• Profile Information: Optional profile picture, bio, and preferences
• Authentication Data: OAuth tokens if you sign in via Google, GitHub, or Microsoft

File Data

When you use our file storage service, we collect:

• Uploaded Files: Files you upload, including file names, sizes, types, and metadata
• File Versions: Previous versions of files if you enable version history
• File Hashes: SHA-256 checksums for deduplication and integrity verification
• Tags and Comments: Any tags or comments you add to files

Usage Information

We automatically collect certain information about your device and how you interact with our service:

• Activity Logs: File uploads, downloads, deletions, shares, and other actions
• Device Information: IP address, browser type, operating system, device type
• Session Data: Login times, session duration, and authentication tokens
• API Usage: API requests, endpoints accessed, and response times

How We Use Your Information

We use the information we collect for the following purposes:

• Provide Services: To operate, maintain, and improve our file storage platform
• Account Management: To create and manage your account, authenticate access, and provide support
• File Storage: To store, organize, and sync your files across devices
• Security: To detect, prevent, and respond to fraud, abuse, security risks, and technical issues
• Analytics: To understand how users interact with our service and improve user experience
• Communications: To send you service updates, security alerts, and support messages
• Compliance: To comply with legal obligations and enforce our Terms of Service

Information Sharing and Disclosure

File Sharing

When you share files or folders, the recipients will have access to the shared content based on the permissions you grant. Shared links can be protected with passwords and expiration dates.

Service Providers

We may share your information with third-party service providers who perform services on our behalf:

• Cloud Storage: File storage infrastructure providers
• Email Services: To send verification codes and notifications
• Analytics: To analyze service usage and performance
• Security: Virus scanning and threat detection services (if enabled)

Legal Requirements

We may disclose your information if required by law or if we believe such action is necessary to:

• Comply with legal obligations, court orders, or government requests
• Protect our rights, property, or safety, or that of our users
• Investigate and prevent fraud, security issues, or technical problems
• Enforce our Terms of Service

Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted to and from our servers uses 256-bit SSL/TLS encryption
• Password Security: Passwords are hashed using bcrypt with salt
• File Integrity: SHA-256 checksums verify file integrity and detect unauthorized modifications
• Access Controls: Role-based access control and two-factor authentication support
• Activity Monitoring: Comprehensive logging and monitoring of suspicious activities
• Data Backups: Regular automated backups to prevent data loss

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to improve our security measures.

Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Export: Download your files and data in a portable format
• Opt-Out: Unsubscribe from marketing emails (service emails are required)
• Withdraw Consent: Revoke consent for data processing where applicable

Exercising Your Rights

To exercise any of these rights:

• Go to your Settings page for account management and data export
• Contact us at demonscriptz137@gmail.com for specific requests
• Use the "Delete Account" option in settings to permanently delete your data

Data Retention

We retain your information for as long as your account is active or as needed to provide services:

• Active Accounts: Data retained while account is active
• Deleted Files: Moved to trash for 30 days before permanent deletion
• Account Deletion: All data permanently deleted within 30 days of account deletion request
• Backups: Data in backups is deleted within 90 days after account deletion
• Legal Holds: Data may be retained longer if required by law or legal proceedings

Cookies and Tracking

We use cookies and similar technologies to:

• Authentication: Keep you logged in across sessions
• Preferences: Remember your settings and preferences
• Security: Detect and prevent security threats
• Analytics: Understand service usage patterns (anonymized)

You can control cookies through your browser settings. However, disabling cookies may affect functionality and require you to log in more frequently.

Third-Party Services

OAuth Authentication

If you sign in using Google, GitHub, or Microsoft, we receive limited information from these providers (name, email, profile picture). Please review their privacy policies:

• Google Privacy Policy
• GitHub Privacy Statement
• Microsoft Privacy Statement

FTP/SFTP Access

If you enable FTP or SFTP access, connection logs (IP addresses, timestamps) are maintained for security purposes.

Children's Privacy

Our service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at demonscriptz137@gmail.com.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top of this policy
• Sending you an email notification for significant changes

We encourage you to review this Privacy Policy periodically. Your continued use of our service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: demonscriptz137@gmail.com
• Website: https://demonscriptz.live/