This is Dropbox's privacy policy — the document that explains what personal information Dropbox collects about you, how it uses it, and who it shares it with. Dropbox collects a wide range of data including your files, usage behavior, device information, and contacts, and may share this with partners and use it to improve its AI features. Users in the EU, UK, and California have specific legal rights to access, delete, or limit how their data is used.
Technical Summary
This document is Dropbox's Privacy Policy governing the collection, use, storage, and disclosure of personal data across its cloud storage and collaboration services. It details the categories of data collected (account information, usage data, device data, and user-generated content), the legal bases for processing, and the circumstances under which data is shared with third parties including service providers, business partners, and law enforcement. The policy provides specific rights for users in regulated jurisdictions including GDPR rights for EEA/UK users and CCPA rights for California residents. Notable provisions include Dropbox's use of user data to improve AI and machine learning features, cross-border data transfers with standard contractual clauses, and the ability for business account administrators to access and control employee accounts.
If you use Dropbox through your employer or organization, your administrator can access, modify, restrict, or delete your account and the files stored in it.
Dropbox shares your personal data with service providers, business partners, and other third parties for purposes including analytics, advertising, and product improvement.
Dropbox transfers your personal data to countries outside your own, including the United States, and uses Standard Contractual Clauses and other legal mechanisms to do so.
California residents have the right to know what personal data Dropbox collects, request deletion of their data, opt out of the sale of their data, and not be discriminated against for exercising these rights.
Dropbox may disclose your personal data and file contents to law enforcement, government agencies, or other third parties when required by law or in response to legal process.
Dropbox retains your personal data for as long as your account is active or as needed to provide services, comply with legal obligations, or resolve disputes.
Users in the European Economic Area and UK have the right to access, correct, delete, restrict, or port their personal data, and to object to certain types of processing.
Added March 20, 2026
Cross-platform context
See how other platforms handle Administrator Access to Business Accounts and similar clauses.