Privacy: founder OAuth pilot
Last updated: 14 October 2026. Contact: [email protected].
CloudMove is testing personal-account authorization for Google Drive → OneDrive and Dropbox → Google Drive. Public transfers and payments are not available. Access is restricted by a founder pilot key. These terms describe the current connection test, not a launched migration service.
What we access
When you explicitly connect an account, the provider handles sign-in and consent. We receive a provider account identifier, email address, granted permissions, and OAuth access/refresh tokens. We never ask for or receive your provider password.
- Google Drive source: read-only file access and basic account identity. No source write or deletion permissions are requested.
- Google Drive destination: access to files created by or explicitly opened with the destination app, plus basic identity. Source and destination use separate OAuth clients.
- OneDrive Personal destination: basic profile and Microsoft
Files.ReadWritepermissions. These permissions allow reading, creating, updating and deleting user files; they are not restricted to a single destination folder. This pilot does not perform file operations. - Dropbox source: account information, file metadata and file-content read access. No source write permissions are requested.
The connection pilot retrieves only your account profile to verify authorization. It does not list your files, read their contents, scan your drive, copy files or start a migration. A future transfer feature will need an updated data-use description before activation.
How data is stored and used
Account metadata and encrypted OAuth tokens are stored in a dedicated Cloudflare D1 database. Tokens are encrypted using AES-GCM; the encryption key and provider client secrets are held as separate Cloudflare secrets. Tokens are not sent to browser storage, reservation queues, analytics or application logs. The browser receives only account status and an opaque, Secure, HttpOnly session cookie.
Credentials are used only to verify the account connection, refresh that authorization when you choose “Check connection,” and attempt revocation when you disconnect. Google user data is not sold, used for advertising, used to train AI models, or shared with unrelated parties. CloudMove's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Cloudflare processes hosting, database and security data for us. Google, Microsoft and Dropbox process authorization requests under their own privacy policies. Infrastructure providers may retain operational request metadata. No third-party analytics are added to the connection interface.
Retention and deletion
Your browser pilot session expires after seven days. Expiration does not itself revoke provider consent or automatically erase database records. Use “Disconnect,” or “Disconnect all and lock pilot,” before the session expires to delete active credential records. If you lose access to the session, contact us to delete its records. Deleted data may remain in Cloudflare database recovery backups until their configured retention expires.
Disconnecting deletes our stored tokens even if provider revocation is unavailable. Google or Dropbox revocation may affect other connections authorized under the same provider app. Microsoft does not provide a matching delegated per-app revocation endpoint, so remove consent in your Microsoft account yourself.
- Google account: third-party connections
- Microsoft account: app consent
- Dropbox account: connected apps
You can refuse or cancel authorization, disconnect at any time, or ask questions and request data deletion at [email protected]. Removing CloudMove credentials does not delete files from any provider.