Summary: DropBox now scans the contents of your private documents to train A.I., shares your data with tech giants like OpenAI and Google, records all browser activity of Dash application users, and has humans manually reviewing data.

In my opinion, it is no longer suitable for private or confidential data of any kind.

Key quotes:

We may build models that identify keywords and topics from a given document. These models may be trained on your documents and metadata

We may review which of a given set of search results you click on [...] This can be done manually by Dropbox employee, or as part of a machine learning model

If you use Dash Answers, we may manually review questions you ask and the responses you receive.

When you use Dropbox Dash, Dropbox will import your browser history, starting with the previous 90 days, [...] The data collected includes the URLs of websites you have visited, as well as the contents of those websites (including page titles, images, and page content). [...] we may share your data with trusted third parties

In order to provide, improve, protect, and promote our Services, Dropbox shares your personal information with trusted third parties [...] Trusted third parties include:

• Amazon Web Services, Inc.
• CloudConvert (Lunaweb, Inc.)
• Concord Technologies Corporation
• ElasticSearch
• FileStack
• FullContact
• Google LLC
• IDnow GmbH
• Intercom, Inc.
• Mailgun Technologies, Inc.
• MaxMind
• Metrics Enterprises, Inc. (Kissmetrics)
• NG Communications bvba
• OpenAI, Inc.
• Oracle America Inc.
• Salesforce.com, LLC
• Stripe
• Teleperformance A.E.
• Twilio, Inc.
• Voxbone, S.A.
• Zendesk, Inc.
• Zoom Video Communications, Inc.

Dropbox has collected and disclosed the categories described [below] to trusted third parties in the preceding 12 months:

your real name, alias, unique personal identifier, or online identifier, and it could also include other personal information like your postal address, Internet Protocol address, email address, account name, profile picture or other similar identifiers

what you decide to store in your Dropbox account

identifying information about contacts that you’ve chosen to give us access to. It can also include identifiers such as a real name, alias, or email address

information relating to your use of the Services

device-specific information, such as an online identifier or Internet Protocol address, or geolocation data