Security & privacy

Privacy isn't a setting.
It's the architecture.

PrivoHub is built so that protecting your data isn't a promise we ask you to trust. It's a consequence of where we host, what we run, and what we deliberately chose not to build.

100%
Data stored on EU soil
AES-256
Encryption at rest & in transit
0
Ads, trackers or data sales
Open
Source software you can audit
Where your data lives

Hosted in the EU. Governed by EU law.

Every photo, file and password lives in data centres inside the European Union. That location isn't a marketing line. It determines which laws protect you, who can compel access to your data, and what rights you can actually exercise.

EU data centres

Your photos, files and passwords are stored in data centres inside the European Union and replicated across EU regions, so a copy exists away from the site that serves them. All of it is operated to ISO-grade physical and operational security standards.

Outside the CLOUD Act

US providers can be compelled to hand over your data under the CLOUD Act, often secretly. As an EU operator with EU-only hosting, that reach doesn’t apply to us.

Renewable-powered

Our infrastructure runs on 100% renewable energy, so keeping your memories safe doesn't come at the planet's expense.

Your GDPR rights, built in

GDPR gives you real, enforceable rights over your personal data. With most services those rights are buried in support tickets. With PrivoHub they're features you can use today.

Right to access

See and download everything we hold about you, any time, from your account.

Right to portability

Export your library in standard, open formats, never a proprietary cage.

Right to erasure

Delete your account and we permanently remove your data. Its copies in our backups expire as they rotate, within 6 months for photos and files and 12 months for databases, and are never used to bring it back.

No hidden processing

We process your data only to run the service you paid for. Nothing else, ever.

How we protect it

Defence in depth, top to bottom.

Security isn't one feature. It's layered through every part of the stack, from the disk your photos sit on to the session in your browser.

Encryption everywhere
AES-256 at rest and TLS 1.3 in transit. Vault adds end-to-end encryption so even we can't read it.
Two-factor authentication
Protect your account with TOTP apps or hardware security keys. Strongly recommended, easy to set up.
Redundant encrypted backups
Encrypted backups every night, replicated across EU regions, so your data survives hardware failure without ever leaving the bloc.
Open, auditable software
The engines behind Photos, Drive and Vault are open source, so security researchers can and do inspect them.

Straight answers

Can PrivoHub staff look at my photos?
Access to production systems is tightly restricted, logged, and used only for maintenance and support you request. We never browse user content, and Vault is end-to-end encrypted so it is technically impossible for us to read.
What happens to my data if PrivoHub shuts down?
You would be notified well in advance with time to export everything in original quality and standard formats. Because our apps are open source, your data is never tied to us alone.
Do you comply with law-enforcement requests?
We comply with valid, lawful requests under EU law only. We are not subject to the US CLOUD Act, we publish how we handle requests, and end-to-end encrypted data simply isn’t ours to hand over.
Is my data encrypted even from you?
Vault is fully end-to-end encrypted, readable only with your master password. Photos and Drive are encrypted at rest and in transit; for those, server-side processing (like search) requires us to handle data in memory, always within the EU and never for profiling.

Move somewhere that respects you.

Start free with 15 GB on EU soil. No card, no ads, no one mining your life.