68 Total
9 High severity
43 Medium severity
16 Low severity

Key Facts

When may Dropbox transfer user data?
Dropbox may transfer user data as part of a reorganization, merger, acquisition, or sale of assets.
When may Dropbox disclose user information to third parties?
Dropbox may disclose user information to third parties when it determines such disclosure is reasonably necessary to comply with any applicable law, regulation, legal process, or appropriate government request.
Does Dropbox disclose user information to third parties when it determines such disclosure is reasonably necessary to comply with applicable law, regulation, legal process, or appropriate government request?
Dropbox may disclose user information to third parties when it determines such disclosure is reasonably necessary to comply with any applicable law, regulation, legal process, or appropriate government request.
Will Dropbox sell user information to advertisers or other third parties?
Dropbox will not sell user information to advertisers or other third parties.
What information does Dropbox collect from users who view content in portions of its Services that provide analytics to content owners?
Dropbox collects identifying and device information—including email addresses, IP addresses, and device identifiers—from users who view content in portions of its Services that provide analytics to content owners.
What does Dropbox store, process, and transmit?
Dropbox stores, processes, and transmits users' content and information related to it, including profile information that facilitates collaboration.
Does Dropbox store profile information that facilitates collaboration?
Dropbox stores, processes, and transmits users' content and information related to it, including profile information that facilitates collaboration.
What ability may Dropbox Team administrators have regarding a user's Dropbox Team account?
Dropbox Team administrators may have the ability to access and control a user's Dropbox Team account.
What information does Dropbox share with the content owner when a viewer accesses a file or folder shared from a feature that provides recipient or viewer analytics?
Dropbox shares a viewer's identifying information—including name, email address, and device information—with the content owner when the viewer accesses a file or folder shared from a feature that provides recipient or viewer analytics.
When does Dropbox initiate deletion of account information after a user deletes their account?
Dropbox initiates deletion of account information 30 days after a user deletes their account.
Stay ahead of the changes
Track Dropbox and get the diff the day its terms change.
Summary

This document explains what information Dropbox collects about you, how it uses and shares that information, and what controls you have over it. Dropbox will not sell your information to advertisers, but it may share it in certain legal situations or if the company is sold or reorganized. You can access, update, download, or delete your personal information directly from your account settings.

Analysis

The Dropbox Privacy Policy establishes Dropbox's practices for collecting, using, storing, and sharing user data across its Services. It sets out Dropbox's data collection scope—including identifying and device information gathered from viewers of shared content—and defines the conditions under which Dropbox may disclose information to third parties, including in response to legal processes and in connection with corporate transactions such as mergers or asset sales. The policy explicitly prohibits the sale of user information to advertisers or other third parties, and retains Dropbox's accountability for third-party processors acting on its behalf. Users are afforded self-service rights to access, amend, download, and delete their personal information through their account settings, and Dropbox commits to notify users when a policy revision meaningfully reduces their rights.

What this means for you

Ordinary users should be aware that Dropbox collects identifying information—including email addresses, IP addresses, and device identifiers—not only when they actively use the service but also when they simply view content shared through features that provide analytics to content owners; when you view such content, your name, email address, and device information are also shared with the person who shared the file. If you use a Dropbox Team account, your administrator may have the ability to access and control that account. If you delete your account, Dropbox begins deleting your information after 30 days, not immediately. To exercise your data rights, you can access, amend, download, or delete your personal information by visiting your account settings page.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

Featured, High severity
Featured, Medium severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

68 provisions
12 featured
15 clause types
9 high severity
AI / Automated Decision-Making 1
Developer / API Restrictions 1
Stay ahead of the changes

Monitoring

Dropbox has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Data may transfer in reorganization or acquisition and similar clauses.

Compare across platforms →
Archival ProvenanceSource & Archival Record
Last Captured March 19, 2026 14:54 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000196
Version ID CA-V-000140
SHA-256 dafeccda2e497f0720e8f9dbe87da437c7024fc64e8bacf7efaa010a8354782f
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans