Privacy Statement

This Privacy Statement explains how All Cor Cloud ("ACC", "we", "us") collects, uses, and protects information when you use our cloud storage service at cloud.cdkac.com. It is written to be read — not to obscure.

The short version: we store your files and the minimum account data required to run the service. We do not sell data, we do not run third-party analytics, and our administrative tooling is architecturally separated from file contents.

Account data. Your email address (used as your login identifier and for service emails: verification, sign-in links, billing notices). Your name, date of birth, and phone number — collected at sign-up, encrypted at rest, and used only to verify your identity during account recovery or billing support.

Your content. Files, folders, versions, and shares you create. File contents are stored on infrastructure that our support tooling cannot read: administrative consoles operate on metadata (counts, sizes, dates) only, and this separation is verified by automated tests on every build.

Operational records. Security and audit events (sign-ins, administrative actions with IP address and approximate location) retained to protect accounts and meet accountability requirements. These records are append-only and cannot be deleted to conceal activity.

All traffic is encrypted in transit (TLS). Identity fields are encrypted at rest with AES-256-GCM. Sign-in credentials (authenticator secrets, recovery codes) are stored only as cryptographic hashes or encrypted values.

File transfers are integrity-checked (SHA-256) end to end. Sessions use short-lived signed tokens in HTTP-only, Secure cookies. Administrative roles are scoped, rate-limited, and fully audited.

No system is perfectly secure. If a breach ever affects your data, we will notify affected accounts promptly and describe what happened, what was exposed, and what we are doing about it.

Files are shared only when you choose to share them — with specific people (permission-controlled) or via links you create (which can require passwords, expire on a date you set, and disable downloads).

We do not sell, rent, or trade your information. We do not embed advertising or third-party tracking. Service infrastructure providers (hosting, database, storage) process data strictly to operate the service under our instructions.

We disclose data to third parties only when legally required, and we narrow the disclosure to what the law demands.

ACC sets a single strictly-necessary cookie (acc_at) that keeps you signed in for the duration of a session. It is HTTP-only, Secure, and SameSite-protected.

We use no analytics cookies, no advertising cookies, and no fingerprinting. Because only a strictly-necessary cookie is used, the service functions identically whether or not you interact with the cookie notice.

Your content remains yours. Deleted files move to a recycle bin (restorable), and permanent deletion removes the content and its versions. Closing your account removes your files, share grants, and personal data, except records we must retain for legal, security, or accounting purposes (which are kept no longer than necessary).

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Because we hold so little personal data, most requests can be fulfilled directly from your account settings. For anything else, contact us at the address below and we will respond within a reasonable period.

If we change this statement materially, we will notify you through the service or by email before the change takes effect. The current version is always available at this page.

Questions about privacy? Contact privacy@acc.cdkac.com.