Privacy Policy

Last Updated: October 2, 2026

Who We Are

This Privacy Policy is published by the Remotely Save development team ("we", "us", "our"). Remotely Save is an Obsidian plugin and related services that synchronize your notes between your devices and your own cloud storage accounts (Google Drive, Microsoft OneDrive, Dropbox, and other supported services).

It covers our website at https://remotelysave.com, the Remotely Save plugin (including its PRO features), and your Remotely Save account. Questions? Contact us at remotelysave@gmail.com at any time.

How Remotely Save Works — And Why It Matters for Your Privacy

The plugin runs locally on your device (inside Obsidian) and connects directly to the cloud storage you choose and authorize with your own account. Your notes are transferred between your device and your own cloud storage; we do not operate an intermediate server that stores your notes.

Two separate, independent things exist:

1. Your cloud storage accounts — for example, your own Google, Microsoft, or Dropbox account. You authorize the plugin on your own device so it can sync notes to your own storage. This is not related to our website's sign-in feature.
2. Your Remotely Save account (optional, needed only for PRO features) — registered on our website with any email address (not necessarily a Gmail address) and used to manage your PRO license.

Google Drive

Data We Access

When you enable Google Drive sync, you authorize the plugin to access your own Google account. We access only:

• Authorization scope: https://www.googleapis.com/auth/drive.file — a per-file, least-privilege scope. The plugin can only view and manage the files and folders that Remotely Save itself created in your Google Drive. It cannot browse or read the rest of your Drive, your Gmail, or any other Google services.
• File contents: the notes you sync, uploaded to and downloaded from your own Google Drive.
• File metadata: file names, sizes, MIME types, timestamps, and checksums — used to decide what to upload, download, or resolve for conflicts.

How We Use It

We use Google user data only to provide the service you requested: uploading, downloading, and synchronizing your notes between your devices and your own Google Drive, and handling conflicts that arise during synchronization. We do not use Google user data for any other purpose.

Authorization, Storage, and Revocation

• The initial sign-in pages are relayed through our website (remotelysave.com/auth/googledrive/) due to technical limitations of the Obsidian platform. The authorization token is displayed to you, you enter it into the plugin, and it is then stored only on your local device in the plugin's local configuration. The plugin then communicates directly with Google's servers for all token refreshes and synchronization operations.
• Your synced notes stay in your own Google Drive, under your full control.
• You can revoke access at any time from inside the plugin or from your Google Account security settings.
• We do not retain your Google OAuth tokens or your Google Drive file contents on our servers.

Google API Limited Use Disclosure

Remotely Save's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide or improve the plugin's user-facing features; we do not use it for advertising (including targeted, personalized, retargeted, or interest-based advertising); we do not sell it to data brokers, information resellers, or any other third parties; we do not use it for credit-worthiness assessment or lending purposes; we do not use it to develop, improve, or train generalized (non-personal or personalized) AI and/or ML models; and we do not transfer it to third parties for any of these purposes.

Microsoft OneDrive

Data We Access

When you enable OneDrive sync, you authorize the plugin to access your own Microsoft account (via Microsoft's identity platform). We access only:

• Authorization scopes, depending on the mode you choose:
  • Basic OneDrive sync (free feature): User.Read, Files.ReadWrite.AppFolder, offline_access. Files.ReadWrite.AppFolder is a least-privilege scope that only reaches the app-specific hidden folder inside your own OneDrive — not the rest of your OneDrive.
  • Full OneDrive sync (PRO feature): User.Read, Files.ReadWrite, offline_access — read and write the files in your own OneDrive. The plugin deliberately does not request broader scopes (such as Files.ReadWrite.All) that would reach files other users shared with you.
• Basic profile: your display name, used to identify which account is signed in.
• File contents and metadata: the notes you sync, plus file names, sizes, and timestamps used for synchronization and conflict handling.

How We Use It

We use Microsoft account data only to provide the service you requested: uploading, downloading, and synchronizing your notes between your devices and your own OneDrive, and handling conflicts that arise during synchronization.

Authorization, Storage, and Revocation

• The sign-in happens on Microsoft's own pages; the plugin on your device exchanges the authorization code directly with Microsoft using the PKCE flow. The resulting tokens are stored only on your local device in the plugin's local configuration, and all synchronization operations run directly between the plugin and Microsoft's servers.
• Your synced notes stay in your own OneDrive, under your full control.
• You can revoke access at any time from inside the plugin or from your Microsoft account settings.
• We do not retain your Microsoft OAuth tokens or your OneDrive file contents on our servers.

Dropbox

Data We Access

When you enable Dropbox sync, you authorize the plugin to access your own Dropbox account. We access only:

• App folder access: by default the plugin uses the "App folder" permission — a least-privilege mode that only reaches the app-specific folder inside your Dropbox, not your other files. (You may also connect with your own Dropbox app key in the plugin settings, in which case the permissions follow your own app's configuration.)
• Account information: your Dropbox username, shown in the plugin so you know which account is signed in.
• File contents and metadata: the notes you sync (read and write), plus file names, sizes, and last-modified timestamps used to compare local and remote files and handle conflicts.

How We Use It

We use Dropbox user data only to provide the service you requested: uploading, downloading, and synchronizing your notes between your devices and your own Dropbox, and handling conflicts that arise during synchronization.

Authorization, Storage, and Revocation

• The sign-in happens on Dropbox's own pages via the OAuth PKCE flow, then Dropbox redirects you back to Obsidian (or you paste a code manually). The tokens are stored only on your local device in the plugin's local configuration, and all synchronization operations run directly between the plugin and Dropbox's servers.
• Your synced notes stay in your own Dropbox, under your full control.
• You can revoke access at any time from inside the plugin or from your Dropbox connected-apps settings.
• We do not retain your Dropbox OAuth tokens or your Dropbox file contents on our servers.

Other Supported Cloud Storage Services

Remotely Save also supports S3-compatible services (Amazon S3, Cloudflare R2, Backblaze B2, etc.), WebDAV (NextCloud, InfiniCLOUD, Synology, etc.), Box, pCloud, Yandex Disk, Koofr, and Azure Blob Storage. The same principles apply: the plugin accesses only your own account, the authorization is performed with your own credentials on your device, and OAuth tokens or access keys are stored locally on your device and used only to connect to your own storage. When you connect to any third-party service, you should also read its own privacy policy.

Optional End-to-End Encryption

Remotely Save supports optional end-to-end encryption. If you enable it, your notes are encrypted on your device with your own password before they are uploaded, and decrypted only after being downloaded back to your device. Without your password, the encrypted contents in your cloud storage cannot be read by us, by your cloud storage provider, or by anyone else. We never receive or store your encryption password.

Remotely Save Account and Payments

If you register a Remotely Save account (needed only for PRO features):

• We collect and store the email address you register with (any email address, not necessarily a Gmail address), and use it to manage your account and PRO license.
• Paid plans are processed by payment service providers (such as Stripe, PayPal, or Lemon Squeezy). We receive your email address and a purchase confirmation, but we do not receive or store your full credit card details.

Information Collected Automatically

Our servers collect standard technical logs when you visit remotelysave.com or when the plugin communicates with our website APIs (for example, PRO license verification or the cloud-storage authorization relay pages): IP address, browser type, requested pages or endpoints, and timestamps. We use this information only to operate, secure, and troubleshoot our services, and keep it only for a limited period consistent with those purposes.

How We Share Information

• We do not transfer or disclose your Google, Microsoft, or Dropbox user data to third parties for any purpose other than providing the plugin's synchronization functionality.
• We do not sell your personal information, and we do not share it with advertising networks, data brokers, or information resellers.
• The only third parties involved are service providers that help us provide the functionality you requested — for example, the payment processors used for PRO purchases — and they receive only the information necessary for that purpose.
• We may disclose information when required by law, or to protect the rights, property, or safety of Remotely Save, our users, or the public.

Data Retention and Deletion

We store your personal information only as long as needed to fulfill the purposes in this Privacy Policy, or as required or permitted by law:

• Account data (email address, license status): retained while your account is active. You may request deletion of your account and personal data at any time at remotelysave@gmail.com. When the retention period for a given type of data expires, or when you request deletion, we will delete or destroy it.
• Cloud-storage OAuth tokens (Google, Microsoft, Dropbox, and others): stored on your device only; deleted when you revoke the authorization or uninstall the plugin.
• Synced notes: stored in your own cloud storage accounts — never on our servers — and you can delete them at any time from your own storage.
• Server logs: retained for a limited period for security and troubleshooting purposes, then deleted.

How We Protect Information

• All network connections are protected with TLS/HTTPS encryption.
• OAuth tokens and other credentials are stored locally on your device rather than on our servers, minimizing the exposure of your data.
• Security procedures are in place to protect the confidentiality of your data, and we monitor our services for potential vulnerabilities and attacks.
• With end-to-end encryption enabled, your note contents are additionally encrypted with your password before leaving your device.

Your Rights

Depending on where you live — for example, under the EU General Data Protection Regulation (GDPR) or certain US state laws — you may have the right to request access to, correction or deletion of, or portability of your personal information, to object to or restrict our processing, and to lodge a complaint with a supervisory authority. To exercise these rights, contact remotelysave@gmail.com. We will verify your identity (for example, by asking you to write from the email address associated with your account) before acting on your request.

Children

Remotely Save is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time; please review this page periodically. If we make material changes — in particular, any change in how we use Google user data — we will notify users (for example, by updating this page and/or displaying a notice in the plugin or on our website).

How to Reach Us

Questions about this Privacy Policy or about how we handle your information — including Google user data? Contact us at remotelysave@gmail.com.

That's it! Thanks for reading.