This Policy governs the processing of your personal data as data controller. The terms " Personal data ", " processing " and any other relevant terms are used as defined in the European Union's General Data Protection Regulation (EU) 2016/679 ("GDPR"). Processing includes collection, storage, and all of the ways we use, and allow you to use, personal data when we provide our services.
Important: We store Personal Data in our primary data centres in Japan, Canada and/or the European Union. In order to provide our services, Personal Data may transit or be temporarily stored on servers in other countries, the full details of which can be found on our website . In this Policy, 'Personal Data' refers to Account Data and Usage Data, together, as those terms are defined below.
None of your Personal Data is stored in, or made available from, the United States of America. We do not collect or store any data that is not mentioned in the present Policy. We will never sell your Personal Data to a third party.
This Policy does not deal with Your Files (the actual encrypted files that you upload, access and share using our services) or Your Chats (the encrypted text, voice and video chats you engage in using our services) because they are not personal data: we cannot decrypt Your Files and Chats thus they are not information relating to an identified or identifiable individual.
The GDPR provides rights to European users, but, as a leading privacy company, to the extent possible, we aim to make the GDPR protections and rights available to all our users globally in respect of their Personal Data wherever they may live.
Account Data
This is the section of this Policy that covers account information you give us, and metadata and records of financial transactions that we generate in relation to your access to the services, including, where applicable, MEGA Pass and MEGA S4. The following specific terms apply: When you sign up for particular services you will need to give us the details required in our registration form and must keep that information up to date, including any payment information. For paid plans, MEGA and payment processors that you use to make payments, retain account and payment information including any tax identification and a record of all transactions on your account. We do not hold your credit card data. When you purchase or use paid services (including services involving cryptocurrency or other regulated payment methods), MEGA may collect and retain certain payer or identity information from you and share it with our payment processors. Where required, we will obtain your consent before sharing such information. When you access our services, our systems may retain the following metadata in unencrypted form: A unique device ID for the device used to log in to our services (that device ID doesn't include the serial number, brand or model of your device); Browser type, device type and/or operating system of the devices from which you have logged in to MEGA, as applicable; IP address and port information used for: logging in to our services; API usage; file uploads; file, chat, folder and album links; and VPN usage (including time and dates of those events); The country that we expect you are accessing our services from (inferred by matching your IP address to a public IP address database); Takedowns and account suspensions; Our communications with you; and Certain account settings, including any avatar picture.