To: Dropbox Support Team / Data Protection Officer
Subject: URGENT - Unauthorized Transfer of Personal Account and Data to Company Control - Legal Action Required
Date: 9th September 2025
Personal Account Email: [...] (DropBox Account Personal data on storage : 6.5 GB
Company Account: [...]
I am filing this formal complaint regarding the unauthorized attachment and transfer of my personal Dropbox account to a company account, resulting in loss of control over my personal data without proper consent, notification, or legal authorization. The company admin is using my access as a hostage for other unauthorised activities and have disabled the access without notice or intimation to remove personal and private data.
What Happened:
- My personal Dropbox account (established prior to 2010) was attached to company account [Hackbook.ai]
- Control and administrative access of my personal account was transferred to company administrators on accepting the invitation to connect
- This occurred without clear notification, explicit consent, or adequate warning about data ownership implications
- I have lost access to personal files, folders, and data that predated any relationship
- No clear process was provided to separate personal data from company oversight
Timeline:
- May 2025 connected to company account by invitation sent by [...]
- 8th Sept Account access was disabled
- Same date customer support was notified for access to be restored
Under GDPR / CCPA / Local Privacy Laws:
- Right to Data Ownership: Unauthorized transfer of personal data ownership
- Lack of Informed Consent: No clear explanation of consequences before account linking
- Right to Data Portability: Restriction of access to personal data
- Right to Data Control: Loss of administrative control over personal information
- Breach of Service Agreement: Unilateral modification of account ownership without proper notice
- Lack of Consideration: Transfer of valuable digital assets without compensation
- Unconscionable Terms: Inadequate disclosure of ownership transfer implications
- Digital Property Rights: Personal files created before employment constitute personal property
- Conversion: Unauthorized assumption of control over personal digital assets
- Unjust Enrichment: Company gaining control over personal data without compensation
- Unfair Business Practices: Inadequate disclosure of account merger consequences
- Deceptive Practices: Failing to clearly communicate ownership transfer implications
- Breach of Fiduciary Duty: Platform failing to protect user interests
- Right to Data Access: Full access to all personal files and metadata
- Right to Data Export: Complete backup of all personal data in portable format
- Right to Account Separation: Removal of company administrative control over personal data
- Right to Data Deletion: Removal of personal data from company-controlled systems
- Data Protection Authority Complaints (GDPR/local privacy regulators)
- Consumer Protection Agency Complaints
- Small Claims Court Action for damages and data recovery costs
- Class Action Participation if similar cases exist
- Arbitration Claims under Dropbox Terms of Service
- Breach of Contract Claims for service agreement violations
- Restore Full Access: Return complete administrative control of personal account
- Data Inventory: Provide complete list of all personal files under company control
- Separation Process: Implement immediate separation of personal data from company oversight of (swapmesh) folder
- Access Logs: Provide records of who accessed personal data during company control period
- Data Export: Provide complete, downloadable backup of all personal data
- Account Restoration: Restore personal account to pre-transfer state without deletion of any data from (swapmesh) folder
- Privacy Audit: Confirm no personal data remains in company-controlled systems
- Documentation: Provide written confirmation of data separation completion
- Service Credits: Compensation for loss of access and inconvenience
- Data Recovery Costs: Reimbursement for any data recovery expenses incurred
- Privacy Violation Damages: Compensation for privacy rights violation
- Legal Fee Coverage: Reimbursement for legal consultation costs if required
Based on Dropbox Terms of Service and Privacy Policy:
- Section : User data ownership rights
- Section : Consent requirements for account modifications
- Section : Notification requirements for significant account changes
- Screenshots of account status changes
- Email communications (or lack thereof) regarding account transfer
- Access logs showing loss of administrative control
- Documentation of personal files predating company association
- Records of attempts to resolve issue through standard support channels
This complaint represents a serious violation of data protection laws and user rights. If not resolved within the timeframes specified above, I will pursue the following escalations:
- Regulatory Complaints: Filing with relevant data protection authorities
- Legal Action: Pursuing available legal remedies through appropriate courts
- Public Disclosure: Reporting incident to consumer advocacy organizations
- Professional Review: Consulting with privacy law attorneys for additional remedies
Given the severity of this data privacy violation, I request immediate escalation to:
- Dropbox Data Protection Officer
- Executive Customer Relations Team
- Legal Compliance Department
Name: Swapnil [...]
Email: [...]
Phone: +91 XXXXXXXXX / +973 XXXXXX
Preferred Contact Method: [Email/Phone]
Best Contact Times: [11 AM to 11PM] - Bahrain Time
This unauthorized transfer of personal data represents a serious breach of trust and legal obligation. Personal digital files are valuable assets that warrant the same protection as physical property. I expect immediate, comprehensive resolution that fully restores my rights and control over my personal data.
I look forward to your prompt response and corrective action within the specified timeframes.
Sincerely,
Swapnil [...]
[personal details removed per Community Guidelines]