Dropbox

Most U.S. users must resolve disputes through individual arbitration unless they opt out within 30 days, and class actions are barred. This can make it harder to pursue claims collectively or in court.

"You and Dropbox agree to resolve any claims relating to or arising out of these Terms or the Services through final and binding individual arbitration"

Users can access, correct, download, delete, and in some cases object to processing of their personal data through settings or by request. Dropbox also supports taking your data elsewhere in machine-readable format.

"You can access, amend, download, and delete your personal information by logging into your Dropbox account and going to your account settings page."

If you open shared content in features with analytics, the content owner may see your identity, device details, and how long and what parts you viewed. This can reduce anonymity when reviewing shared documents.

"we will share your identifying information such as name and email address, information on the device you used to view the content, and for how long you viewed content"

On Dropbox Team accounts, organization admins may access, disclose, restrict, remove information, or terminate your access. Even non-team users interacting with team content may have some information exposed to that organization.

"Your administrators may be able to access, disclose, restrict, or remove information in or from your Dropbox Team account."

Dropbox broadly disclaims warranties and usually caps damages at the greater of $20 or the amount paid under the current plan. If something goes wrong, your financial recovery may be very limited.

"WE LIMIT OUR LIABILITY TO YOU TO THE GREATER OF $20 USD OR 100% OF ANY AMOUNT YOU'VE PAID UNDER YOUR CURRENT SERVICE PLAN"

Dropbox says your files remain yours and the terms do not transfer ownership. That is a strong baseline protection for users storing documents and media there.

"Your Stuff is yours. These Terms don’t give us any rights to Your Stuff except for the limited rights that enable us to offer the Services."

Dropbox expressly says it does not sell your information to advertisers or other third parties. That is a meaningful privacy-positive commitment compared with many ad-supported services.

"We may share information as discussed below, but we won’t sell it to advertisers or other third parties."

To run features like previews, OCR, search, and sharing, Dropbox may access, store, and scan your content, and extend that permission to affiliates and trusted third parties. This is operationally common, but it means your files are not treated as inaccessible to Dropbox systems.

"Dropbox accesses, stores, and scans Your Stuff. You give us permission to do those things, and this permission extends to our affiliates and trusted third parties"

Dropbox collects account, file-related, contact, usage, device, cookie, and viewer analytics information. For a productivity service this may be expected, but users should know the service monitors substantial metadata and activity.

"We collect and use the following information to provide, improve, protect, and promote our Services."

Paid plans renew automatically until canceled, and refunds are generally only available where required by law. Users need to actively cancel to avoid future charges.

"We’ll automatically bill you from the date you convert to a Paid Account and on each periodic renewal until cancellation."

Dropbox commits to government request principles and publishes a transparency report about law-enforcement requests. That gives users more visibility into official data access demands.

"We publish a Transparency Report as part of our commitment to informing you about when and how governments ask us for information."

After account deletion, Dropbox says it initiates deletion after 30 days, but backups and legal retention can delay full removal. This is fairly typical, though not immediate.

"If you delete your account, we’ll initiate deletion of this information after 30 days."