Privacy Policy
Last updated: Jan 3, 2025. View previous privacy policy 
Welcome to the Privacy Policy for Rakuten Drive (“R-Drive”, "we", "us" or "our"). We provide cloud services for file storage, sharing/transfer on the Rakuten Drive website, the Rakuten Drive mobile applications, and all the products you can download on our website (the “Services”).
Rakuten Drive is a Service provided by Rakuten Symphony Korea, Inc. We are part of the Rakuten Group. Rakuten Group, Inc., is based in Tokyo, Japan. You can find more information about Rakuten here
This Privacy Policy explains how we collect, use, share and protect your personal data. We also explain what options and rights you have and how to use them.
- 1. Personal Data we collect.
- 2. How we use your data and the basis on which we use it.
- 3. Your Choices.
- 4. Data Sharing.
- 5. International Data Transfer.
- 6. Security.
- 7. Retention.
- 8. Contact Us.
- 9. Changes to this Policy.
1. Personal Data we collect
We collect personal data in different ways when you sign up for or use our Service, The following is a list of the categories of personal data we collect, and how we obtain it.
Information that you directly provide to us
You provide personal data to us when you sign up for an account, for us to provide you our Service. This contains:
-
Basic information:
- Personal details (first name and last name)
- Contact details (email address, phone number)
- Account login details (username, registered country, password, social login account ID, Rakuten Drive account ID, Rakuten ID)
-
Payment information:
- Payment card details (cardholder name, credit card number, expiration date, CVC code)
Information we collect via cookies and tracking technologies
When you use our Service, we will collect the following data using tracking technologies placed in our website. These data types are:
- Identifiers for devices you have used to access our Services (Device Identifiers):
- Unique device identifier or MAC identifier
- Advertising-related identifiers
- IP address (from which your approximate location can be inferred)
- Internet activity information: information about your visits to our website and login sessions, language preference and usage of the Services (include what you view)
Information that will be inferred about you from how you use the Service:
- Interests
Information we collect about you from other sources
When you register or sign up into our Services using third parties’ services, We collect personal data about you from third parties, at your request, to allow your registration and authentication in our Services. The categories of information that we collect about you from these sources are:
- Facebook: Facebook account ID (email address)
- Apple: Apple account ID (email address)
- Google: Google account ID (email address)
- Viber (email address, phone number)
The use and collection of your data by these third parties is governed by their own Terms & Conditions and Privacy Policy.
2. How we use your data and the basis on which we use it
We always need a proper reason to process your data.
The basis shall be the collection of personal data for the purpose of performing our contract with you (create your account); where applicable,fulfilling our legitimate interests, only when we have a valid interest that shall not override yours (the collection of data in order to secure our Services); complying with our legal obligations; as well as, where applicable, processing personal data based on your consent (when you voluntarily request to participate in our marketing activities).
If we ask for your consent to process your personal data, you may withdraw your consent at any time (for example, you can unsubscribe from our marketing emails in each communication you receive or reject cookies via our cookie settings). You can find more information about Rakuten Drive Cookies & Tracking Technologies Policy .
You can find here the information regarding the purposes for which we process the types of personal data listed above, as well as our basis for such processing operations.
| Purpose of Use | Type of Data | Basis for Processing | Retention Period |
|---|---|---|---|
| Provide you the Services |
| Performance of a contract: We process your data to provide, operate and deliver you our Services:file storage, sharing/transfer cloud Service. | Until your account is canceled or after one (1) year if your account is deactivated. |
| Authentication & Account management |
| Performance of a contract: Allow you to register, log in or activate your account. Verify that your identification you when you log into our Service(authentication). We record your configuration and settings, to manage your accounts. Creating and update your profile, with the information youprovided to us. Legitimate interest: To create a Rakuten ID if you sign up for one. We share your account credentials and profile information for log-in function. This service is jointly provided by the Rakuten ID services as directed by you, if you sign up with another Rakuten ID service. See further information here . | Until your account is canceled or after one (1) year if your account is deactivated. |
| Provide customer support and Service communications | | Performance of a contract: Allow you to register, log in or activate your account. Verify that youridentification you when you log into our Service (authentication). We record your configuration and settings, to manage your accounts. Creating and update your profile, with the information you provided to us. Legitimate interest: To create a Rakuten ID if you sign up for one. We share your account credentials and profile information for log-in function. This service is jointly provided by the Rakuten ID services as directed by you, if you sign up with another Rakuten ID service. See further information here . | Until your account is canceled or after one (1) year if your account is deactivated. |
| Subscriptions & purchased Services |
| Performance of contract: We need your financial information to provide you with our premium features and add-ons with your Rakuten Drive paid plan account. You can find more information about the features of each plan on our website. Your credit card number and CVC code will be provided by you directly to the applicable provider of payment services, and we will not have access to this data. Legal obligation: We are required by law to collect and save transactional data when you make apurchase. | For CVC code and card number, deleted right after transaction. Transactional data will be kept up to five (5) years after transaction, due to our legal obligation. |
| Safety, security, and fraud prevention | | Legitimate interest: We use data to protect our Service from fraud and other threats. We analyze log-in patterns (access logs) to protect your account against being accessed by someone else. | Logs are stored for (1) year. For other data, until your account is canceled or after one (1) yearif your account is deactivated. |
| Marketing and advertising activities | | Consent: We send you marketing messages if you agree to it. Profiling: We personalize, with your prior consent, to deliver to you appropriate advertising and make them more relevant and interesting for you. For this purpose, we share your device data and unique IDs and IP address with third party advertising partners. Additional information (including how to opt-out of data collection using cookies) is available on our cookie policy . To improve your experience, by providing interactive or personalized elements. | When you unsubscribe or request deletion. If there is no request, until your account is canceled. |
| Improve and customize the Services for you | | Legitimate interest: To provide benefits or operational improvements for smoother user experience. Internal analytics about how our Service is used. Develop new features for Service improvements. Improving the technical functionality of the Service. Consent if you are located in the People’s Republic of China. | Until your account is canceled or after one (1) year if your account is deactivated. |
| Compliance with law requirements | Depending on the circumstances, any data as detailed under “The personal information we use” Section above. | Legal obligation: We may be required by law to disclose data to law enforcement bodies (such as a court or the police). | As long as required by law. |
Profiling
We may create a profile about you, based on your usage of the Service, to personalize the marketing and advertising provide to you, if you consented to it.
3. Your Choices
We always need a proper reason to process your data
The rights and choices about your data are different depending on your location.
This includes the right to request:
- access to your data; either if you want to know what data we have about you.
- get a copy of your data in a machine-readable format (right to data portability).
- correct any information that is wrong.
- delete your data.
- restrict usage to the bare minimum (for example, if you ask us to delete, but we still need to keep your orderhistory for legal reasons, like tax audits of our business).
- object to specific uses (you can opt-out of marketing e-mails).
- ask us where we got certain data about you, how we use it and with whom we share it; oraffected.
- withdraw your consent easily; if you do so, the lawfulness of processing based on your consent beforeits withdrawal will not be affected.
Please see below the rights available under the applicable law for your region. Show more..
| Region | Access | Portability | Correction | Deletion | Objection | Consent Withdrawal |
|---|---|---|---|---|---|---|
| EEA | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ |
| China | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ |
| Japan | ✔ | N/A | ✔ | ✔ | N/A | N/A |
| South Korea | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ |
| United Kingdom | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ |
You can always ask us to exercise these rights without having to be afraid of discrimination. Also, you can file a complaint with your data protection authority, where applicable, if you think we mishandled your data. If you want to request any of this from us, please just get in touch with us by using the “Contact” Section below. We will always try to find a good and easy solution together.
4. Data Sharing
We share your data with:
- Other Rakuten services that use Rakuten ID - in case that you log in to any service with the same Rakuten ID. The Rakuten Group aims to provide you with a unique service experience through the “Rakuten ID”. Rakuten ID is a unified program that allows you to easily connect to other Rakuten services by a single log-in function, share your account information or join a loyalty program with the Rakuten Group companies jointly participating in the Rakuten ID program. Your data will only be shared if you chose to connect to another Rakuten ID service. By connecting to another Rakuten ID service, you direct the Rakuten ID services to share your data for the purposes explained in our joint privacy policy here .
- Rakuten Group, Inc. (Japan), our parent company - when using Rakuten ID to log-in; supports the ID service as a processor, and for security and compliance purposes, as well as for service improvements and analytics. See further information here .
- Service providers and business partners, who help us make our Service possible (they are data processors). We ensure they only have access to such information that is strictly necessary for us to provide the Services. These parties are required to secure the data they receive and to use the data for pre-agreed purposes only, while ensuring compliance with all applicable data protection regulations.
- Law enforcement bodies where we are required to share data or with a court if necessary to enforce our claims or other legal rights.
- Asset purchasers - In case our Service or our company are fully or partly purchased by another company, data will be shared. The acquiring company will be bound by this privacy policy.
- Advertising partners - We disclose or share your personal data, with you consent if it is required, for advertising purposes. Further information about data sharing using cookies and other device identifying technologies is available in our Rakuten Drive Cookies & Tracking Technologies Policy .
Find here the list of our services providers, business and advertising partners, the data we share and the countries where they are located. Show more...
| Recipient’s category | Recipients name | Country | Data Shared | Retention |
|---|---|---|---|---|
| Service provision | Amazon Web Services | United States |
| Until your account is canceled or after one (1) year if your account is deactivated. |
| Payments We share your personal data with them, to process secure payments | Stripe | United States |
| For CVC code and payment card number deleted right after transaction. Transactional data will be kept up to five (5) years after transaction, due to our legal obligation. |
| Marketing purposes | Intuit Inc | United States | Contact details (email | When you unsubscribe or request deletion. If there is no request until your account is canceled. |
| Naver | Korea | Service usage; statistical information (number of clicks, number of views, userreactions like reactions) | ||
| United States | ||||
| Youtube | United States | |||
| United States | ||||
| Communication, support and customer services | Intuit Inc | United States |
| Until your account is canceled or after one (1) year if your account is deactivated. |
| United States | ||||
| Improve and customize the Services | Google Analytics | United States |
See more details in Rakuten Drive Cookies & Tracking Technologies Policy https://home.rakuten-drive.com/cookie_policy | Until your account is canceled or after one (1) year if your account is deactivated. |
| Firebase | United States | |||
| Other Rakuten services | Please see detail information about recipients and their countries here: https://corp.rakuten.co.jp/privacy/en/rakuten-id.html |
| Until your account is canceled or after one (1) year if your account is deactivated.you chose to connectwith them. | |
5. International Data Transfer
We are a global business. That means your data will be shared to other Rakuten Group companies around the world. Also, we use service providers in different countries. Data are sent to them as well as indicated in the “Data Sharing” Section above. We have taken steps to keep your data safe. We are always watching out to ensure they are trust worthy, and we have strict contracts in place.
Inside the Rakuten Group, we have BCRs (Binding Corporate Rules), a set of privacy internal rules that we apply across all the Rakuten Group companies. The BCRs are Rakuten global standard for the protection of privacy and processing of personal data. Rakuten’s BCRs allow secure transfers of data within the Rakuten Group companies and have been approved by the relevant Data Protection Authorities in Luxembourg and the United Kingdom. You can find them here.
6. Security
We have strict security measures in place in accordance with high security standards to ensure that your account and your data are safe with us. Some of these are technical, like password rules and monitoring of log-in patterns. Others are organizational, like having proper processes and access rules in place. We do so to prevent unauthorized access or unauthorized disclosure of your information, to maintain the accuracy of such information and, when necessary, to ensure its proper destruction.
When collecting or transferring your personal information, we employ data encryption technology, and restrict access only to those persons who require it to fulfil their job responsibilities. We conduct periodic reviews of our practices to ensurethat our safeguards are properly implemented and remain state of the art. We make sure to always keep up with the latest developments.
7. Retention
As long as you have your account, we keep your data. When you delete your account, we will retain data only if we are required to do so by law, or in case we still need it for our defense in court proceedings. See retention period’s details in the “How we use your data and the basis on which we use it” Section above.
In order to protect your personal data, accounts with no activity for over one (1) year will be converted into deactivated accounts and will be kept separated. We will send you a deactivation notice to your e-mail address or a mobile push thirty (30)days before the deactivation of your account. In addition, we may post a notice about the deactivation when you log in and will ask for your consent to reactivate your account.
If you do not log in into your account within one (1) year after being temporarily deactivated, the account and all your personal data, if it is not subject to legal retention requirements under the applicable laws, shall be deleted. If you do not want your account and personal data to be deleted after the deactivation period, you can log in into the Services at any time before the above term, provide your consent to reactive your account and use the Services normally.
8. Contact Us
Symphony Korea Inc. is the responsible for the personal data we collect and process. Our Privacy Officer is Jang, Hyekyoung. Our main offices are in located 11F,368, Sapyeong-daero, Seocho-gu, Seoul, Republic of Korea. If you have questions or concerns regarding the way in which your personal information has been used, please contact support@rakuten-drive.com (Rakuten Drive Help Center).
Our privacy officer can be contacted from the above email address. If you have any complaint, we hope we can work with you to achieve a good solution. If we are not able to, you can contact your local data protection authority. Additionally, you can contact the data protection authority of Luxembourg here .
9. Changes to this Policy
We may update this privacy policy from time to time. If there is going to be a substantial change, we will notify you in advance.