Privacy

Approval Studio Cloud Connector · last updated 23 September 2026

The Cloud Connector moves files from a folder in your Dropbox into your Approval Studio account. This page says exactly what it stores, what it can reach, and how to make it stop.

What we store

An access token for Approval Studio and a refresh token for Dropbox, so the connector can act on your behalf without holding your password. We never see or store either password.
Your name and email address as reported by Dropbox and by Approval Studio, so the page can show you which accounts are connected.
For each file it has sent: its name, size, modification time and a content fingerprint. The fingerprint is how the connector knows a file has not changed and avoids uploading it again.
Your settings — how folders map to projects, and which workflow to start.

We do not keep your files. File contents pass through the service in memory on their way to Approval Studio and are not written to disk or retained afterwards.

What the connector can reach in Dropbox

It is an App folder application. Dropbox confines it to a single folder named Approval Studio inside your account, and that boundary is enforced by Dropbox rather than by our code. It cannot see anything else in your Dropbox, whatever it tries.

It holds read-only permissions — files.metadata.read, files.content.read and account_info.read. It cannot create, change or delete anything in your Dropbox.

How tokens are protected

Tokens are encrypted at rest with AES-256-GCM. The key lives in the service's configuration, not alongside the data, so a copy of the stored data on its own cannot be used to reach your accounts. Tokens are never sent to your browser and never appear in logs.

Who else sees it

Nobody. Data is not sold, shared or used for advertising, and there are no third-party analytics or trackers on these pages. The connector talks only to Dropbox and to Approval Studio.

Deleting your data

Disconnect and erase this connection on your connection page removes the tokens, the sync history and your settings immediately and permanently. Anything already delivered to Approval Studio stays there — it is yours, in your own account.

You can also revoke access from the Dropbox side at any time, under Settings → Connected apps.

Retention

Records are kept while the connection exists. A setup that is never completed is deleted automatically within 24 hours.

Contact

Questions about this service or your data: support@approval.studio.