All Your Files remain encrypted at all times while they are on our system. They are never received, stored or otherwise dealt with by us in unencrypted form because any decryption takes place only on your device or that of another user to whom you have provided the file/folder links and keys that are created when you give them access. We may, but shall not be obliged to, keep Your Files after your account has been suspended or terminated. In particular, we may, but shall not be obliged to, keep Your Files where we consider it necessary for evidential purposes relating to a breach of our Cookie Policy, Terms or with respect to current or anticipated action by any competent enforcement authority or other third party.   Every text message you send is stored as an encrypted binary large object (“blob”). 8.3 When you use our services, our systems retain the following metadata in unencrypted form:   8.3.1 Browser type and operating system of the devices from which you have logged in to MEGA.   8.3.2 IP address and port information for logins, API usage, file uploads, folder creations and link exports. Where there is no enforcement action likely or commenced and the 12 month period has expired, or after such longer period as is applicable in the case of records of financial transactions relating to your account that we are legally required to retain, Account Data that identifies you will be anonymised, but where you are a contact of, have had a folder shared with you by, or have chatted with, another MEGA user, those details will continue to be retained to allow services to continue for those other users.  8.8 You can download your Account Data at https://mega.nz/fm/account/history while you are logged into your account. This will provide your Account Data but not Your Files.  You can request correction of Account Data if it is considered incorrect, in accordance with the New Zealand Privacy Act 2020 and the GDPR. Any requests for access to, or correction of, Account Data that is not available to you when you are logged into your account, or if you cannot log in to your account, should be made to privacy@mega.nz specifying the information in question. The information will be provided promptly, and at least within one month, without charge unless the request is manifestly unfounded or excessive. Corrections will be promptly considered and actioned if appropriate.   9.1.4 serve advertisements or use third-party advertising companies to serve advertisements on our services and on third party sites, as well as to assist us in analysing our marketing and other business efforts. We collect and keep Usage Data with your consent to provide services and support related to our services, for market and product research and to be able to give users promotional material and special offers on our services.  15 If we think it is necessary or we are obliged by law in any jurisdiction, then we are entitled to give Your Files, Your Chats, any Account Data and any Usage Data to competent authorities, even if those items are encrypted. We reserve the right to assist any law enforcement agency with investigations, including disclosure of information to them or their agents. We also reserve the right to comply with any legal processes, including but not limited to data breach notification processes, subpoenas, search warrants and court orders initiated by enforcement authorities or other third parties. We may disclose Your Files, Your Chats, any Account Data and any Usage Data to enforce or apply our Terms, our Cookie Policy, our Takedown Guidance Policy and this Policy or any other agreement we have with you, or to protect the rights, property, or safety of us or our other users, third parties or the operation of our services.  We will never sell Your Files, Your Chats, any Account Data or any Usage Data.  We may send invoices, security or service updates and various other notices by email to the email address listed in your account or using any of our chat or messaging systems. They will be deemed to be received in accordance with our Terms.   20 If appropriate, some of those notices will contain unsubscribe information so you can opt out of further receipt. We will abide by any email unsubscription request (other than those we need to send for invoicing, security or service updates and other service provider purposes).  Subject to the rights that those in the European Union have under the GDPR, this Policy and its interpretation and operation are governed solely by New Zealand law.  

Summary:
User-generated content is encrypted, and this service cannot decrypt it. This service may keep personal data after a request for erasure for business interests or legal obligations. The user is informed about security practices. This service collects your IP address, which can be used to view your approximate location. The service may keep a secure, anonymized record of users' data for analytical purposes even after the data retention period. This service allows you to retrieve an archive of your data. You can request access, correction and/or deletion of your data. Many third parties are involved in operating the service. This service may use your personal information for marketing purposes. This service reserves the right to disclose your personal information without notifying you. Your personal data is not sold. You can opt out of promotional communications. The court of law governing the terms is in New Zealand.