Privacy Policy

Williamsburg Computer Tech, LLC (operating as D3S, WBCT, and affiliated with cloud.d3s.io, d3s.io, wbcomputertech.com, and logicalgamer.com) respects your fundamental privacy rights. This Privacy Policy details how your information, files, protocol sync sessions, collaborative documents, media clustering, communications, malware filtering, and AI requests are handled and safeguarded across our private cloud ecosystem.

1. Information We Collect ↑ Top

• Account Identifiers: Username, display name, registered contact email, and cryptographically hashed passwords or app authentication tokens.
• User Content: Files, notes, calendars, contacts, task lists, photos, videos, and media synchronized or uploaded directly by your account.
• Communication Data: Chat messages, reaction metadata, and channel logs exchanged inside Nextcloud Talk.
• Storage & Usage Metrics: Disk allocation usage, quota headroom, trash bin volume, and transfer metrics to ensure server health and quota compliance.
• Operational & Antivirus Logs: Connection timestamps, IP addresses, WebDAV/HTTP request headers, sync statuses, error codes, and ClamAV malware definition match logs recorded solely for security auditing and intrusion prevention.

2. Children's Privacy (COPPA Compliance) ↑ Top

Our services are not directed to children under 13. We do not intentionally collect, store, or process personal data, facial vectors, or communications from children under the age of 13. If we discover that an account has been registered by a child under 13 without verifiable parental consent, the account and its associated stored assets will be deleted immediately.

3. Infrastructure & Administrator Access ↑ Top

Your data resides on private, self-hosted hardware directly managed by Williamsburg Computer Tech, LLC / D3S.

• Administrative Scope: System administrators hold root-level access to the host operating system, filesystem, and databases. This access is restricted strictly to routine system maintenance, security patching, storage quota management, performance tuning, and investigating documented violations of our Terms of Service.
• No Profiling or Scanning: We do not inspect, browse, scrape, or monetize your unencrypted personal files. We run zero third-party advertising, analytics pixels, or commercial tracking scripts.

4. User Data Sovereignty, Data Portability ("Move Data") & Account Deletion ↑ Top

We believe that your data belongs entirely to you. You maintain full ownership and continuous access to manage, transfer, or permanently delete your assets:

• Export & Portability: Through Nextcloud's built-in Data Export utility and standard protocol interfaces (WebDAV, CalDAV, CardDAV), you can request and generate a complete archive of your stored files, calendar databases, and address books at any time without administrative intervention.
• Data Migration ("Move Data"): Where cross-server data migration features are enabled, you may initiate a direct transfer of your profile, directories, and configuration settings to another compliant Nextcloud instance.
• Self-Service Account Deletion: You have the right to terminate your account. When an account is deleted via the user settings dashboard or an administrative deletion ticket:
  • Your user authentication tokens, app passwords, and login profiles are immediately revoked and disabled.
  • Your personal file directories, thumbnails, database records, and chat history are instantly queued for deletion and removed from active storage arrays.
  • Encrypted disaster-recovery snapshots will automatically overwrite and purge previous snapshot states in accordance with our regular rotational retention cycle.

5. Data Retention & Inactive Account Archival ↑ Top

Deleted files reside in the Nextcloud Trash Bin subject to server auto-purging rules based on quota thresholds. Accounts inactive for more than 180 days are flagged for archival and eventual deletion after 30 days notice to ensure our physical storage arrays remain unburdened by abandoned datasets.

6. Automated Antivirus & Security Inspection (ClamAV) ↑ Top

Unencrypted uploaded files and sync streams are automatically scanned against current virus signatures using a local ClamAV daemon:

• 100% On-Premises Scanning: ClamAV operates entirely on our private host server. File contents, binaries, and scan outputs are never sent to third-party cybersecurity clouds or external analytics services.
• Automated Heuristics Only: Scanning is performed algorithmically by matching file byte patterns and hashes against threat databases; file contents are not read or profiled by human staff.
• E2EE Exemption: Files within End-to-End Encrypted (E2EE) folders cannot be parsed by ClamAV because encryption occurs locally on your client machine before transfer.

7. Nextcloud Office (Collabora Online) Privacy ↑ Top

When you edit documents using Nextcloud Office:

• Files are rendered and processed strictly within our self-hosted Collabora Online runtime container.
• Document contents are loaded into server memory strictly during active collaborative sessions. Document streams are never transmitted to external cloud office suites (such as Google Docs or Microsoft 365).
• Temporary session caches are purged from memory once editing sessions close.

8. Nextcloud Memories & Biometric / Facial Recognition Data ↑ Top

• No Third-Party Transmission: Photo assets, facial embeddings, and visual recognition vectors are never transmitted to third-party image recognition APIs (such as Amazon Rekognition, Google Vision, or Apple).
• Zero Model Training: Your photographs and facial templates are never utilized to train, calibrate, or improve global commercial models.
• User Control & Deletion: Facial recognition is user-scoped. If you delete photos or request removal of recognized person clusters, the underlying vector embeddings are permanently cleared from the local database.

9. Nextcloud Talk (Calls, Video & Chat) ↑ Top

Nextcloud Talk provides real-time encrypted communications:

• Signaling & WebRTC Media: Audio/video streams run peer-to-peer (P2P) between call participants whenever possible. When relay servers (TURN/STUN) are needed, media streams pass through encrypted tunnels without inspection.
• No Call Recording by Default: Real-time audio and video conversations are ephemeral and are not recorded by the Provider unless a room participant explicitly activates an in-call recording feature.
• Chat Persistence: Text messages in Talk rooms remain stored on our self-hosted database until deleted by users or pruned according to chat retention policies.

10. Federated Cloud Sharing Privacy ↑ Top

If you interact with users on remote Nextcloud instances via Federated Sharing, metadata (such as your display name, cloud ID, and shared content) is transmitted to the receiving server. That data becomes subject to the security posture and privacy policies of the destination server's administrator.

11. D3S AI (Self-Hosted Ollama Backend) ↑ Top

• Zero Training on User Data: Your queries, documents, and inputs are never stored into training sets, weights, or fine-tuning datasets.
• Ephemeral In-Memory Inference: Prompts are loaded into server memory strictly to execute the immediate inference stream and are cleared upon request completion.

12. Third-Party Protocol Connections (WebDAV, CalDAV, CardDAV) & 2FA ↑ Top

Third-party sync connections occur across TLS-encrypted HTTPS sessions. Users utilizing two-factor authentication (2FA) must generate individual App Passwords within Nextcloud Security Settings. App passwords allow targeted revocation of specific client devices without risking your master account login.

13. End-to-End Encryption (E2EE) Protection ↑ Top

For folders configured with Nextcloud End-to-End Encryption (E2EE):

• Files are encrypted locally on your client machine before transit.
• Data stored on our physical disks and mirrored to off-site backup snapshots exists strictly as encrypted ciphertext.
• The Provider, system administrators, and third parties have no cryptographic capability to inspect, parse, or recover your E2EE-protected contents.

14. Drive Redundancy & Encrypted Off-Site Backups ↑ Top

• Local Redundancy: Storage arrays implement multi-drive redundancy (e.g., RAID/ZFS) to protect against individual disk failures.
• Encrypted Off-Site Backups: Disaster recovery snapshots of files and databases are securely synced to off-site nodes. All backup archives are strongly encrypted both in transit and at rest to prevent unauthorized physical or digital tampering.

15. Security Vulnerability & Bug Bounty Reporting ↑ Top

If you discover security issues, unauthorized data exposures, or protocol bugs in our Nextcloud/Collabora/Talk/Ollama services, please report them responsibly and privately. We operate an email reporting channel protected against automated scrapers:

Designated Security Reporting: Click to Reveal Contact Email

16. Third-Party Sharing & Law Enforcement Requests ↑ Top

We never sell, lease, or monetize your personal data, files, prompts, photos, or logs to advertising networks, corporate data brokers, or third parties.

We will disclose account data or files only when compelled by a valid subpoena, court order, or warrant issued by a court of competent jurisdiction:

• For standard unencrypted storage, disclosures are limited strictly to the data accessible on the host storage array.
• For E2EE-protected data, the Provider cannot decrypt files and can only produce raw, unreadable ciphertext.

17. Contact & Legal Entity Information ↑ Top

For privacy questions, data export assistance, DMCA notices, or account deletion inquiries, please contact:

• Primary Entity: Williamsburg Computer Tech, LLC (WBCT)
• Operating Brands & Domains: D3S (d3s.io, cloud.d3s.io), wbcomputertech.com, logicalgamer.com
• Jurisdiction: Commonwealth of Virginia, USA
• Administrator Contact: Click to Reveal Contact Email