If a user grants Dropbox access to their device or account contacts, Dropbox stores those contacts on its servers for use in collaboration, sharing, and invitation features, including access by the user's Dropbox Team if applicable.
This analysis describes what Dropbox's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses that contact list data from a user's device or connected services is stored on Dropbox servers when access is granted, and that team users' contacts may be accessible to the team for collaboration purposes. The storage of third-party contact data on Dropbox servers implicates the personal data of individuals who have not directly agreed to Dropbox's terms.
Under this clause, users who grant Dropbox access to their contacts authorize Dropbox to store those contacts, which include personal data of third parties, on Dropbox servers for collaboration and sharing purposes. Contact access is described as user-initiated and optional.
Cross-platform context
See how other platforms handle Contact List Access and Storage and similar clauses.
Compare across platforms →"You may choose to give us access to your contacts to make it easy for you, and your Dropbox Team if you're a Dropbox Team user, to do things like share and collaborate on Your Stuff, send messages, and invite others to use the Services. If you do, we'll store those contacts on our servers.Excerpt from Dropbox's Privacy Policy
1) REGULATORY LANDSCAPE: This provision implicates GDPR obligations regarding processing of third-party personal data, as contact list entries belong to individuals who have not directly consented to Dropbox's data collection.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision discloses that contact list data from a user's device or connected services is stored on Dropbox servers when access is granted, and that team users' contacts may be accessible to the team for collaboration purposes. The storage of third-party contact data on Dropbox servers implicates the personal data of individuals who have not directly agreed to Dropbox's terms.
Under this clause, users who grant Dropbox access to their contacts authorize Dropbox to store those contacts, which include personal data of third parties, on Dropbox servers for collaboration and sharing purposes. Contact access is described as user-initiated and optional.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Dropbox.