Legal
Privacy Policy
This policy explains how AndorraOS collects, uses, protects, and stores personal information when you use the platform.
Last updated: March 30, 2026
1. Legal Entity
AndorraOS is operated by 0xdev SL, L-715543-S, a company registered in Andorra.
2. Information We Collect
We may collect account information, uploaded files, document metadata, activity logs, and technical information such as IP address, browser, and device details.
3. How We Use Information
We use your data to provide document storage and sharing features, secure accounts, prevent abuse, support the product, and improve the service.
4. Legal Bases for Processing
We process personal data based on the performance of a contract to provide the service, our legitimate interests such as security, fraud prevention, and product reliability, and legal obligations where applicable.
5. Your Content
You retain ownership of your files and data. We process that content only as necessary to operate, secure, and maintain AndorraOS.
6. Sharing and Subprocessors
We do not sell personal data. Information is shared only when you explicitly create access, when trusted subprocessors help operate the service, or when required by law. We use trusted third-party service providers such as hosting, storage, email, and authentication providers to operate the service, including providers such as Vercel, S3-compatible storage providers, Resend, and Google authentication services.
7. International Data Transfers
Your data may be processed in countries outside your jurisdiction, including the United States, when our service providers or infrastructure operate there. Where required, we rely on appropriate safeguards for such transfers.
8. Cookies and Similar Technologies
We may use cookies or similar technologies to operate, secure, and improve the service. These technologies may support authentication, session management, preferences, abuse prevention, and analytics.
9. Security and Retention
We apply technical and organizational safeguards to protect data. However, no system is completely secure, and we cannot guarantee absolute security. Data is retained only as long as necessary to provide the service, maintain security, resolve disputes, enforce our agreements, or comply with legal obligations.
10. Deletion Requests
You may request deletion of your account and personal data at any time, subject to limited retention where necessary for legal, security, fraud-prevention, or record-keeping purposes.
11. Minors
The service is not intended for individuals under 18, and we do not knowingly collect personal data from children.
12. Your Rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export your personal data, subject to applicable law. You may also have the right to lodge a complaint with a data protection authority.
13. Changes
We may update this Privacy Policy from time to time. Continued use of the service after the updated policy becomes effective means you accept the revised version.
14. Contact
For privacy-related requests or questions, contact us at contact@andorraos.com.