Privacy Policy

Last updated: November 13, 2026

Uploadly File Picker is operated by Weiland Enterprises LTD, Themistokle Dervi 48, Floor 3, Office 306, 1066 Nicosia, Cyprus ("we", "us"), as part of the Uploadly app.

This policy explains how Uploadly File Picker handles data when you upload files through the uploader in an online shop, including files you pick from Google Drive, Google Photos, Dropbox, Microsoft OneDrive or Box.

What we access

• Google Drive: only the files you select in the Google file picker (scope drive.file). We cannot see any other files.
• Google Photos: only the photos and videos you select in the Google Photos picker (scope photospicker.mediaitems.readonly).
• Dropbox: only the files you select in the Dropbox chooser; we receive a temporary download link, no account access.
• OneDrive and Box: read access to your files while the picker is open, so you can browse folders and select files. We download only the files you select.

How we use it

We download the selected files once and store them as your upload, exactly like a file you upload from your device, so the shop can process your order. Access tokens are kept only in your browser and, encrypted, for at most one hour to complete the download. We do not store refresh tokens, we do not keep access to your account after the picker is closed, and we do not read file lists, contacts, profile data or anything you did not select.

Sharing

Uploaded files are made available to the shop where you uploaded them. We do not sell data, do not use it for advertising, and do not share it with anyone else except the infrastructure providers that store and deliver the files (Cloudflare, Inc. and BunnyWay d.o.o.).

Google API Services User Data Policy

Uploadly File Picker's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google is used only to provide the file upload you requested, is not transferred to others except as needed for that purpose or required by law, is not used for advertising, and is not read by humans except with your consent, for security purposes or as required by law.

Retention and deletion

Uploaded files are kept for up to six months and then deleted automatically. You can ask for earlier deletion at any time by contacting the shop or us. You can also remove the access in your Google, Dropbox, Microsoft or Box account settings at any time.

Contact

Questions about this policy: the contact address shown on the consent screen.