Privacy Policy
Last updated: April 30, 2026. View previous privacy policy
Welcome to the Privacy Policy for Rakuten Drive ("R-Drive", "we", "us" or "our"). We provide cloud services for file storage, sharing/transfer on the Rakuten Drive website, the Rakuten Drive mobile applications, and all the products you can download on our website (the "Services").
Rakuten Drive is a Service provided by Rakuten Mobile, Inc. We are part of the Rakuten Group. Rakuten Group, Inc., is based in Tokyo, Japan. More information about Rakuten is available at https://global.rakuten.com/corp/about/company
This Privacy Policy explains how we collect, use, share and protect your personal data. We also explain what options and rights you have and how to use them.
- Personal Data we collect and how
- How we use your data and the basis on which we use it
- Your Choices
- Data Sharing
- International Data Transfers
- Security
- Retention
- Contact Us
- Changes to this Policy
1. Personal Data we collect and how
We collect personal data in different ways when you sign up for or use our Service. The following is a list of the categories of personal data we collect, and how we obtain it.
Information that you directly provide to us
You provide personal data to us when you sign up for an account, for us to provide you our Service. This contains:
Basic information:
- Personal details (first name and last name)
- Contact details (email address, phone number)
- Account login details (username, registered country, password, social login account ID, Rakuten Drive account ID, Rakuten ID)
Financial information:
- Payment card details (cardholder name, credit card number, expiration date, CVC code)
Information we collect via cookies and tracking technologies:
When you use our Service, we will collect the following data using tracking technologies placed in our website. These data types are:
- Identifiers for devices you have used to access our Services (Device Identifiers):
- Unique device identifier or MAC identifier
- Advertising-related identifiers
- IP address (from which your approximate location can be inferred)
- Internet activity information: information about your visits to our website and login sessions, language preference and usage of the Services (include what you view)
Further information about our use of Cookies and Tracking Technologies is available in our Rakuten Drive Cookies & Tracking Technologies Policy https://home.rakuten-drive.com/cookie_policy
Information that will be inferred about you from how you use the Service:
- Interests
For more details about how we process the inferred information about you, including the purposes and the legal basis for which this data is collected, please see the "How we use your data and the basis on which we use it" Section.
Information we collect about you from other sources
When you register or sign up for our Services using third parties' services, We collect personal data about you from third parties, at your request, to allow your registration and authentication in our Services. The categories of information that we collect about you from these sources are:
- Facebook: Facebook account ID (email)
- Apple: Apple account ID (email)
- Google: Google account ID (email)
- Viber (email, phone number)
In addition, we receive payment if you subscribe to the Services via their application store. They act independently and based on their own privacy policies below. We will not have access to this data.
Apple Store: Link to the privacy policy
Google Play: Link to the privacy policy
The use and collection of your data by these third parties is governed by their own Terms & Conditions and Privacy Policy.
2. How we use your data and the basis on which we use it
We always need a proper reason to process your data.
The basis shall be the collection of personal data for the purpose of performing our contract with you (create your account); where applicable, fulfilling our legitimate interests, only when we have a valid interest that shall not override yours (the collection of data in order to secure our Services); complying with our legal obligations; as well as, where applicable, processing personal data based on your consent (when you voluntarily request to participate in our marketing activities).
If we ask for your consent to process your personal data, you may withdraw your consent at any time (for example, you can unsubscribe from our marketing emails in each communication you receive or reject cookies via our cookie settings). You can find more information about Rakuten Drive Cookies & Tracking Technologies at https://home.rakuten-drive.com/cookie_policy
You can find here the information regarding the purposes for which we process the types of personal data listed above, as well as our basis for such processing operations.
| Purpose of Use | Type of Data | Basis for Processing | Retention Period |
|---|---|---|---|
| Provide you the Services | Account details (Social media account ID, R-Drive account ID, or Rakuten ID); Contact details (email, phone number); Account login details (Country). For guest users none of the above categories are collected; IP address; Device Identifiers; Internet activity information (language preference and user activity) | Performance of a contract: We process your data to provide, operate and deliver you our Services: file storage, sharing/transfer cloud Service. | Until your account is canceled or after one (1) year if your account is deactivated. |
| Authentication & Account management | Contact details (email, phone number); Account Details (Account ID, Social Media account, account ID or Rakuten ID); IP address; Device Identifiers | Performance of a contract: Allow you to register, log in or activate your account. Verify that your identification you when you log into our Service (authentication). We record your configuration and settings, to manage your accounts. Creating and update your profile, with the information you provided to us. Legitimate interest: To create a Rakuten ID if you sign up for one. We share your account credentials and profile information for log-in function. This service is jointly provided by the Rakuten ID services as directed by you, if you sign up with another Rakuten ID service. See further information here: https://corp.rakuten.co.jp/privacy/en/rakuten-id.html . | Until your account is canceled or after one (1) year if your account is deactivated. |
| Provide customer support and Service communications | Personal details (First and last name); Contact details (email address); Account Login Details (Login Account, Username); Data we collect from your communications with us | Legitimate interest: We use your data to reply to your requests and inquiries, and to notify you about changes and updates to our Services. | Until your account is canceled or after one (1) year if your account is deactivated. |
| Subscriptions & purchased Services | Contact details (email address); Account details (account ID); Payment card details (Cardholder name, Card expiration date, CVC code, Card number); Transactional data (date, time, amount, and only the last four digits of the card number) | Performance of contract: We need your financial information to provide you with our premium features and add-ons with your Rakuten Drive paid plan account. You can find more information about the features of each plan on our website. Your credit card number and CVC code will be provided by you directly to the applicable provider of payment services, and we will not have access to this data. Legal obligation: We are required by law to collect and save transactional data when you make a purchase. | For CVC code and card number, deleted right after transaction. Transactional data will be kept up to five (5) years after transaction, due to our legal obligation. |
| Safety, security, and fraud prevention | Personal details (First and last name); Contact details (email address); IP address; Device Identifiers; Access logs | Legitimate interest: We use data to protect our Service from fraud and other threats. We analyze log-in patterns (access logs) to protect your account against being accessed by someone else. | Logs are stored for (1) year. For other data, until your account is canceled or after one (1) year if your account is deactivated. |
| Marketing and advertising activities | IP address; Advertising Identifiers; Language preferences; Device Identifiers; Service usage information and login information | Consent: We send you marketing messages if you agree to it. Profiling: We personalize, with your prior consent, to deliver to you appropriate advertising and make them more relevant and interesting for you. For this purpose, we share your device data and unique IDs and IP address with third party advertising partners. Additional information (including how to opt-out of data collection using cookies) is available on our https://home.rakuten-drive.com/cookie_policy. To improve your experience, by providing interactive or personalized elements. | When you unsubscribe or request deletion. If there is no request, until your account is canceled. |
| Improve and customize the Services for you | Account Details; Device Identifiers (Device ID) | Legitimate interest: To provide benefits or operational improvements for smoother user experience. Internal analytics about how our Service is used. Develop new features for Service improvements. Improving the technical functionality of the Service. Consent if you are located in the People's Republic of China. | Until your account is canceled or after one (1) year if your account is deactivated. |
| Compliance with law requirements | Depending on the circumstances, any data as detailed under "The personal information we use" Section above. | Legal obligation: We may be required by law to disclose data to law enforcement bodies (such as a court or the police). | As long as required by law. |
Profiling
We may create a profile about you, based on your usage of the Service, to personalize the marketing and advertising provide to you, if you consent to it. We may use AI and other technologies to achieve the purposes in the above table.
3. Your Choices
The rights and choices about your data are different depending on your location. This includes the right to request:
- access to your data; if you want to know what data we have about you.
- get a copy of your data in a machine-readable format (right to data portability).
- correct any information that is wrong.
- delete your data.
- restrict usage to the bare minimum (for example, if you ask us to delete, but we still need to keep your order history for legal reasons, like tax audits of our business).
- object to specific uses (you can opt-out of marketing e-mails).
- ask us where we got certain data about you, how we use it and with whom we share it; or
- withdraw your consent easily; if you do so, the lawfulness of processing based on your consent before its withdrawal will not be affected.
Please see below the rights available under the applicable law for your region.
| Region | Access | Portability | Correction | Deletion | Objection | Consent Withdrawal |
|---|---|---|---|---|---|---|
| EEA | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ |
| China | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ |
| Japan | ✔ | N/A | ✔ | ✔ | N/A | N/A |
| South Korea | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ |
| United Kingdom | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ |
You can always ask us to exercise these rights without having to be afraid of discrimination. Also, you can file a complaint with your data protection authority, where applicable, if you think we mishandled your data. If you want to request any of this from us, please just get in touch with us by using the "Contact" Section below. We will always try to find a good and easy solution together.
4. Data Sharing
We share your data with:
- Other Rakuten services that use Rakuten ID; in case you log in to any service with the same Rakuten ID. The Rakuten Group aims to provide you with a unique service experience through the "Rakuten ID". Rakuten ID is a unified program that allows you to easily connect to other Rakuten services by a single log-in function, share your account information or join a loyalty program with the Rakuten Group companies jointly participating in the Rakuten ID program. Your data will only be shared if you choose to connect to another Rakuten ID service. By connecting to another Rakuten ID service, you direct the Rakuten ID services to share your data for the purposes explained in our joint privacy policy here: https://corp.rakuten.co.jp/privacy/en/rakuten-id.html.
- Rakuten Group, Inc. (Japan), our parent company — when using Rakuten ID to log-in; supports the ID service as a processor, and for security and compliance purposes, as well as for service improvements and analytics. See further information here .
- Service providers and business partners, who help us make our Service possible (they are data processors). We ensure they only have access to such information that is strictly necessary for us to provide the Services. These parties are required to secure the data they receive and to use the data for pre-agreed purposes only, while ensuring compliance with all applicable data protection regulations.
- Law enforcement bodies where we are required to share data or with a court if necessary to enforce our claims or other legal rights.
- Asset purchasers. In case our Service or our company are fully or partly purchased by another company, data will be shared. The acquiring company will be bound by this privacy policy.
- Advertising partners — We disclose or share your personal data, with your consent if it is required, for advertising purposes. In such a case, the advertising partners may combine and analyze advertisement identifiers and other personal data that they manage with the information they receive from us to deliver customized advertisements. Further information about data sharing using cookies and other device identifying technologies is available in our Rakuten Drive Cookies & Tracking Technologies Policy https://home.rakuten-drive.com/cookie_policy
Find here the list of our services providers, business and advertising partners, the data we share and the countries where they are located.
| Recipient's category | Recipients name | Country | Data Shared | Retention |
|---|---|---|---|---|
| Service provision | Amazon Web Services | United States | Personal details; Contact details (email address, Phone number); IP address (from which your approximate location can be inferred); Identifiers for devices you have used to access our Services (Device Identifiers); Account details (social media login account ID) | Until your account is canceled or after one (1) year if your account is deactivated. |
| Payments — We share your personal data with them, to process secure payments | Stripe | United States | Personal details; Your payment card details (cardholder name, card expiration date, CVC code, card number); Transactional data (date, time, amount, and the only the last four digits of the card number) | For CVC code and payment card number deleted right after transaction. Transactional data will be kept up to five (5) years after transaction, due to our legal obligation. |
| Marketing purposes — We share your personal data with them, to send newsletters, and marketing emails. | Intuit. Inc | United States | Contact details (email) | When you unsubscribe or request deletion. If there is no request until your account is canceled. |
| United States | Service usage; statistical information (number of clicks, number of views, user reactions) | |||
| YouTube | United States | |||
| Naver | Korea | |||
| Communication, support and customer services — We share data for messaging Services (sending important Service updates, notifications) and to respond to your inquiries. | Intuit. Inc | United States | Personal details (first name and last name); Contact details (email address); IP address (from which your approximate location can be inferred); Identifiers for devices you have used to access our Services (Device Identifiers) | Until your account is canceled or after one (1) year if your account is deactivated. |
| United States | ||||
| Zendesk | United States | |||
| Improve and customize the Services | Google Analytics | United States | Contact details (email address); Identifiers for devices you have used to access our Services (Device Identifiers and OS version); Account login details (registered country); Service Usages. See more details in Rakuten Drive Cookies & Tracking Technologies Policy | Until your account is canceled or after one (1) year if your account is deactivated. |
| Firebase | United States | |||
| Zeppelin | United States | |||
| Apple | United States | |||
| Google Play Store | United States | |||
| Rakuten Group, Inc. | Japan | |||
| Other Rakuten services — We share your personal data with another Rakuten ID services if you chose to connect with them. | See detail information about recipients and their countries here | Account ID and profile information (first and last name, email address) | Until your account is canceled or after one (1) year if your account is deactivated. | |
Because we operate as part of a global business, the recipients referred to above may be located outside the jurisdiction in which you are located (or in which we provide the Services). See the Section on "International Data Transfers" below for more information.
5. International Data Transfers
Our data servers are located in various parts of the world, including Japan, South Korea, and the United States. Your personal information and data you upload to Rakuten Drive (hereinafter referred to as "uploaded data") may be processed on servers located outside of your country of residence. However, if you reside in Japan, we will store and handle your personal information and uploaded data on servers within Japan.
We are a global business. That means your data will be shared with other Rakuten Group companies around the world. Also, we use service providers in different countries. The main countries and regions to which your personal information is transferred through our business activities include Korea, the United States, and India. Data are sent to them, as indicated in the "Data Sharing" Section above. We have taken steps to keep your data safe. We are always watching out to ensure they are trustworthy, and we have strict contracts in place. For details on appropriate safeguards, please contact us using the information below. The countries for the service providers and business partners located outside of Japan is available here .
Inside the Rakuten Group, we have BCRs (Binding Corporate Rules), a set of privacy internal rules that we apply across all the Rakuten Group companies. The BCRs are Rakuten's global standard for the protection of privacy and processing of personal data. Rakuten's BCRs allow secure transfers of data within the Rakuten Group companies and have been approved by the relevant Data Protection Authorities in Luxembourg and the United Kingdom. You can find them here .
6. Security
We have strict security measures in place in accordance with high security standards to ensure that your account and your data are safe with us. Some of these are technical, like password rules and monitoring of log-in patterns. Others are organizational, like having proper processes and access rules in place. We do so to prevent unauthorized access or unauthorized disclosure of your information, to maintain the accuracy of such information and, when necessary, to ensure its proper destruction.
When collecting or transferring your personal information, we employ data encryption technology and restrict access only to those persons who require it to fulfil their job responsibilities. We conduct periodic reviews of our practices to ensure that our safeguards are properly implemented and remain state of the art. We make sure to always keep up with the latest developments.
7. Retention
As long as you have your account, we keep your data. When you delete your account, we will retain data only if we are required to do so by law, or in case we still need it for our defense in court proceedings. See retention period's details in the "How we use your data and the basis on which we use it" Section above.
In order to protect your personal data, accounts with no activity for over one (1) year will be converted into deactivated accounts and will be kept separated. We will send you a deactivation notice to your e-mail address or a mobile push thirty (30) days before the deactivation of your account. In addition, we may post a notice about the deactivation when you log in and will ask for your consent to reactivate your account.
If you do not log in into your account within one (1) year after being temporarily deactivated, the account and all your personal data, if it is not subject to legal retention requirements under the applicable laws, shall be deleted. If you do not want your account and personal data to be deleted after the deactivation period, you can log in into the Services at any time before the above term, provide your consent to reactive your account and use the Services normally.
8. Contact Us
Rakuten Mobile, Inc. is responsible for the personal data we collect and process. Our Privacy Officer is Shunsuke Yazawa, Representative Director and President. Our main office is located in Rakuten Crimson House, 1-14-1 Tamagawa, Setagaya, Tokyo, Japan. If you have questions or concerns regarding the way in which your personal information has been used, please contact contact@rakuten-drive.com (Rakuten Drive Help Center).
Please note that when contacting us, we may ask you for certain information to verify your identity and respond to your request appropriately.
Our privacy officer can be contacted from the above email address. If you have any complaint, we hope we can work with you to achieve a good solution. If we are not able to, you can contact your local data protection authority. Additionally, you can contact the data protection authority of Luxembourg here .
9. Changes to this Policy
We may update this privacy policy from time to time. If there is going to be a substantial change, we will notify you in advance.