e2w drive

Privacy notice

Version 1.0 · 16 August 2026

This explains what e2w drive stores about you, why, where it is kept and how to get rid of it. It is written to be read, not to be survived.

The short version

Your files are stored in the Netherlands. Your account details are stored in the United Kingdom.
We never open, read, scan or index the contents of your files.
Nothing is ever sent to an AI model. We do not run one.
We do not sell, rent or share your data, and there is no advertising anywhere in e2w drive.
Ask us to delete your account and everything goes, apart from one one-way code made from your email address, which stops the free trial being taken twice.

Who we are

e2w drive is operated by e2w consulting llc, which is the data controller for everything described here.

Registered address: 30 Prospekt Sobornosti, Kyiv 02000, Ukraine
Registered as LLC “E2W CONSULTING”, USREOU 43577919, Ukraine
Privacy contact: privacy@e2wconsultinghosting.co.uk
EU representative (GDPR Article 27): TO BE APPOINTED

What we store, and why

This is the complete list. It was written from the database itself rather than from a template, so it describes what is actually there.

What	Why we have it	Legal basis
Your email address and name	To create your account, sign you in and send you service messages such as verification and password resets.	Contract
Your password, stored only as a salted PBKDF2 hash	To sign you in. We cannot see your password and cannot recover it — only reset it.	Contract
Your drive name and whether it is personal or business	To separate your drive from everybody else's and to show the right name.	Contract
File and folder names, sizes, dates, checksums and version history, including which person and which computer made each version	To back up your files, sync them between your computers, show you a file list and let you go back to an earlier version.	Contract
The contents of your files	Because storing them is the product. We never open them.	Contract
Anything you type into e2w drive — notes, flags, priorities, due dates	To show it back to you and to the people you share a drive with.	Contract
Email addresses you share files with, plus the permission you gave and how many times the link was opened	To deliver the share, to let you withdraw it, and to show you whether it was used.	Contract
The name of each computer you connect, when it last synced, and the IP address it was connected from	So you can see every machine attached to your drive and cut one off if it is lost or stolen.	Contract, and our legitimate interest in account security
IP address and browser for each sign-in, and an activity log of security-relevant actions with the IP address that performed them	To detect and investigate unauthorised access, and to show you what happened to your own drive.	Legitimate interest in keeping accounts secure
The IP address you signed up from	To detect automated and abusive sign-ups.	Legitimate interest in preventing abuse
A one-way code (SHA-256) made from your email address, the domain part of that address, and the IP you signed up from — kept even after you close your account	So the free trial can only be taken once per person. The code cannot be turned back into an email address; it can only be compared against a new sign-up. See Deleting your account.	Legitimate interest in preventing repeated free trials

We do not ask for, and have no place to put, your date of birth, your address, your phone number, or any of the special categories of data listed in Article 9 of the GDPR — health, biometrics, religion, politics and the rest. There is no payment information in e2w drive today; when paid plans start, card details will be handled by a payment provider and will not reach our systems.

What we never do

These are commitments about how the software is built, not just promises.

We never read your files. Nothing in e2w drive opens a file to look inside it — not to index it, not to scan it, not to make a preview.
Nothing is sent to an AI model. e2w drive can produce a summary of your drive for you to paste into whichever AI assistant you already use. That summary is made on your own computer from file names, sizes and dates — never file contents — and it is handed to you. We do not run an AI model, we do not pay an AI company, and nothing of yours is sent to one by us.
Nothing you store is used to train anything.
There is no advertising, no tracking pixels, no analytics scripts and no third-party cookies anywhere in e2w drive. The only cookie we set is the one that keeps you signed in.
We do not sell, rent or trade your data to anybody, at any price.

Where your data is kept

It is in two places, and it is worth being exact about which is which.

What	Where	Who runs it
The contents of your files	Netherlands (EU)	Backblaze B2, region `eu-central-003`
Your account, file list, sharing and activity log	United Kingdom	eUKhost
Service emails we send you	United Kingdom	eUKhost mail servers

The United Kingdom is covered by a European Commission adequacy decision, which means personal data may move there from the EU without further safeguards.

Backblaze, Inc. is registered in the United States, so it may in principle be reached by US legal process even though your files themselves sit on Dutch disks. We use the standard contractual clauses with our suppliers.

e2w consulting llc is registered in Ukraine, in Kyiv. Your files are held in the Netherlands and your account records in the United Kingdom, but the company that runs e2w drive is outside the EU and the UK, and the people who operate it reach your account from there. Ukraine is not covered by a European Commission adequacy decision, which is one of the reasons the EU representative named above has to exist.

We tell you this because a claim of "European storage" that hides the corporate side of the question is not worth making.

Who else touches your data

Only these, and only to run the service:

Backblaze B2 — stores your files, in the Netherlands.
eUKhost — hosts our database, our website and our outbound mail, in the United Kingdom.

That is the whole list. There is no analytics provider, no advertising network, no AI provider and no data broker.

How long we keep it

Your files and file history — until you delete them, or until you close your account.
Deleted files — recoverable for a limited window so an accident can be undone, then removed.
Your account details — until you close your account.
Sign-in sessions — sessions expire, and the record of them, including the IP address, is kept for 12 months.
The security activity log — 12 months.
The one-way trial code — kept indefinitely, because that is the only thing that makes it work.

Deleting your account

You can close your account and have everything erased at any time. It is free, it is not buried, and we do not ask you why.

When you do, we delete your files from storage, and we delete your email address, your name, your file list, your sharing history, your device list and your activity log.

One thing survives, and only one. We keep the one-way code made from your email address, its domain, and the IP address you originally signed up from, so that the free trial cannot simply be taken again. The code is a SHA-256 hash: it cannot be reversed into your address, it cannot be used to contact you, and it is never shared. If you would rather that went too, say so when you ask us to close the account and we will remove it — you will simply not be able to take another free trial under that address.

Your rights

If you are in the EU or the UK, the GDPR gives you the right to:

See what we hold about you, and get a copy of it.
Correct anything wrong. Your name and email you can change yourself in the app.
Have it erased — see above.
Get your data out in a portable form. Your files are your files: you can download them at any time, in their original format, without asking us.
Object to processing we do on the basis of legitimate interest, and ask us to restrict it.
Withdraw consent where we relied on it — though for most of what is listed above we rely on the contract with you, not consent.

Write to privacy@e2wconsultinghosting.co.uk and we will answer within 30 days. We will not charge you and we will not make it difficult.

There is no automated decision-making and no profiling in e2w drive.

Keeping it safe

Everything travels over HTTPS, and the site is set to refuse anything else.
Passwords are stored as salted PBKDF2 hashes. We cannot read them.
Sign-in sessions, device connections and share links are stored as hashes too — if our database were ever taken, the stolen copy would not let anybody in.
Every computer connected to your drive can be cut off by you, on your own, immediately.
Files are stored in a European facility with its own encryption at rest.

If a breach ever put your rights at risk we will tell the relevant supervisory authority within 72 hours, and we will tell you.

Children

e2w drive is for business and personal use by adults. It is not aimed at children and we do not knowingly create accounts for anybody under 16. If you believe a child has an account, tell us and we will remove it.

Complaints

Please come to us first — most things are a misunderstanding we can fix the same day. If we cannot put it right, you have the right to complain to the data protection authority in the country where you live or work.

Changes to this notice

If we change anything that matters — a new supplier, a new country, a new kind of data — we will email you before it takes effect, not quietly update the page and hope. The version number and date at the top always tell you which notice you are reading.