Privacy Policy

1. Overview and Core Commitment

MMS CloudVault is a dedicated digital media asset pipeline and object storage delivery infrastructure operated by MMS Studio (studio.sabbirmms.com). We take your privacy, data security, and confidentiality with paramount seriousness. This Privacy Policy outlines what information we process, how authentication credentials are used, and our commitment to zero third-party data selling.

2. Information We Collect

• Google Account Authentication Data: When administrators sign in via Google OAuth 2.0, we only receive and verify your primary Google email address, full name, and avatar picture. We do not access Google Drive, Gmail messages, contacts, or any other personal Google user data.
• Authorized Email Whitelisting: Access to the administrative portal is strictly restricted to pre-approved administrator emails configured in the system whitelist. Unauthorized accounts are immediately rejected and no account records or sessions are retained.
• Uploaded Media Assets: Image files, titles, and unique asset IDs uploaded via authorized API keys or the administrative dashboard are stored within our S3-compatible cloud object storage (Cloudflare R2 / AWS S3) for the sole purpose of delivery to your mobile/web applications.
• Technical Logs: IP address, browser user-agent, and API request timestamps are recorded temporarily solely for rate limiting, DDoS mitigation, and diagnostic logging.

3. How Media Assets Are Processed & Stored

Uploaded images are processed directly in-memory using the high-performance Sharp optimization engine:

• Images exceeding defined max dimensions are smoothly downscaled preserving aspect ratio.
• Assets are compressed into modern WebP format to conserve mobile bandwidth and device storage.
• A compact blur_hash placeholder string is calculated for seamless progressive client-side loading.
• When an updated image is uploaded for an existing asset ID, previous assets are automatically recycled.

4. Data Retention, Soft Deletes & Purging

Deleted assets are preserved in a soft-deleted Trash state for up to 30 days, allowing authorized administrators to restore accidentally removed items. After 30 days, or upon manual administrator trigger via the dashboard, assets are permanently destroyed from both object storage and the relational database.

5. Contact Us

For privacy inquiries, security notifications, or data deletion requests, contact the MMS Studio Engineering Team: