What they may do · DPDP §6(4)
What TeraBox does with your data
You agree it can profile your habits, interests and credit into 'label information' for automated decisions and marketing; facial recognition may be required to verify your account; data is shared with Flextech affiliates and retention can be extended past the normal period.
-
Shares your data with partners
Passed to group companies, advertisers or analytics firms you never chose.
What this costs you. Your number and habits travel to companies you have never heard of and never agreed to. This is the step where the spam calls start.
Show me where they say that
TeraBox’s own policy says “We may share infrastructure, systems, and technology with Flextech affiliates to deliver, optimize, protect, and promote the Services. These affiliates will use your information in conjunction with us and the information you have listed in the "What information is collected and for what purpose" section for the purposes described therein.”
Our summary infrastructure, systems and technology are shared with Flextech group affiliates, who use the user's information in conjunction with TeraBox; separately, trusted third-party providers may access information to perform tasks on TeraBox's behalf.
-
Builds an advertising profile of you
They watch what you view, tap and buy, and use it to decide which ads you see.
What this costs you. Your attention gets priced. What you hesitate over becomes a bid — and a profile built to predict you is a profile built to persuade you.
Show me where they say that
TeraBox’s own policy says “You agree that we can aggregate, integrate, identify, analyze, portray, or further process the personal information actively or passively provided by you in the Services through the technology of us or our trustees to form a variety of label information with different degrees of granularity that reflect your operation habits, interests, or credit (hereinafter referred to as "label information"). We will use label information for automated decision-making in specific scenarios and applications, so as to send you personalized information and/or marketing information.”
Our summary the user agrees TeraBox may profile their activity into granular 'label information' reflecting operation habits, interests or credit, and use it for automated decision-making to send personalised and marketing information. Note the policy frames this as marketing, not third-party ad targeting.
-
Keeps your records long-term
Held on after you stop using the service.
What this costs you. Years after you delete the app, the record is still sitting there — and every year it sits there is another year it can leak.
Show me where they say that
TeraBox’s own policy says “We will store your personal information for the period required for providing the Services. However, in the event that laws and regulations require otherwise, you agree to keep the information for a longer term, it is necessary to ensure the security and quality of the Services, the information is required to settle disputes, or it is technically intractable to process the information as required, we will extend the retention period as per laws and agreement or to a reasonable extent after the expiration of the aforesaid period.”
Our summary the storage period can be extended beyond what providing the service requires — for security or quality, to settle disputes, or where processing is 'technically intractable'.
-
Processes your face or other biometrics
Face matching, liveness checks or similar.
What this costs you. You can change a leaked password in a minute. You cannot change your face. A biometric breach is permanent in a way nothing else is.
Show me where they say that
TeraBox’s own policy says “In the event that it is required by laws and regulations, necessary for us to provide the product or the Services, or based on your demand to enhance the security of your account, you must provide your real name, identity document number, and facial recognition information for account authentication to use some Terabox services or to meet your further needs.”
Our summary facial recognition information, alongside real name and identity document number, may be required for account authentication before some TeraBox services can be used.
What the policy does not mention
These are uses TeraBox’s policy is silent on. Silence is not a promise — it means the document does not say, and we do not infer either way.
- Follows you onto other websites and apps
- Trains AI models on your content
TeraBox is one app. How many are on your phone?
Most people carry twenty to forty. Add yours and see the total in one screen — how many share your data, profile you for ads, or follow you across the web. Then take it back from all of them at once.
Manage my data with Saaph.in →Free to check · no account needed · built in India for the DPDP Act
Questions
What does TeraBox do with my personal data?
According to TeraBox's own privacy policy, read on 2026-08-14, it discloses 4 of the six uses we track: shares your data with partners, builds an advertising profile of you, keeps your records long-term, processes your face or other biometrics.
Can I withdraw my consent from TeraBox?
Section 6(4) of India's Digital Personal Data Protection Act 2023 gives you the right to withdraw consent for processing you agreed to. The Act's substantive provisions commence in stages up to May 2027, so a request made now asks for voluntary compliance and puts the date on record. Processing a company carries out under a legal obligation — such as KYC records the RBI requires — cannot be withdrawn.
Does TeraBox track me for advertising?
Yes — TeraBox's published policy discloses this. The exact sentence it is based on is quoted on this page, with the date we read it and a link to the source.
Every use above is one TeraBox declared in its own published privacy policy, which we
read on 2026-08-14. Quotes are verbatim; the summary beside each one is ours
and is labelled as ours. Nothing here is inferred.
Saaph.in is a DPDP consent and request management platform operated by Ronin Works
Private Limited. It is a communication facilitator, not your legal or authorised
representative. The DPDP Act 2023 commences in stages up to May 2027, so a request
made today asks for voluntary compliance and records the date you asked.
Our privacy policy