Nyota Drive Product Terms & Storage Addendum

Effective Date: September 15, 2026
Parent Agreement: Master Terms of Service
Governing Jurisdiction: Republic of Kenya

1. Incorporation of Master Terms & Addendum Scope

This Nyota Drive Product Terms & Storage Addendum ("Drive Addendum") is an explicit, binding extension of the Nyota Imara Master Terms of Service ("Master Terms"). This Addendum applies to all customers, developers, application administrators, and enterprise workspaces accessing or integrating the Nyota Drive API (POST /drive/files/...), S3-compatible REST endpoints, or Web file management dashboards (drive.nyotaimara.com).

By creating a storage bucket, generating presigned upload URLs, or storing files on Nyota Drive, you agree to this Addendum, the Master Terms, and our Privacy Policy.

2. Infrastructure Architecture & Sub-Processor Disclosures

A. Cloudflare R2 Storage & Global CDN Integration

Nyota Drive operates an independent control plane managed by Nyota Imara Technologies for indexing folder trees, access control policies, sharing tokens, and usage quotas.

The underlying binary object storage plane is powered by Cloudflare R2 Object Storage and distributed via Cloudflare Global Edge CDN Networks (Cloudflare, Inc., USA/Global).

By uploading or distributing files on Nyota Drive, you consent to the physical storage and edge caching of binary payloads across Cloudflare’s infrastructure under strict Data Processing Agreements.

B. Dual-Bucket Visibility Topology

Nyota Drive enforces strict physical and logical separation between public and private data:

1. Private Storage Buckets (visibility: "private"):
   Objects are encrypted and locked. Direct binary access requires an authenticated Bearer JWT, a valid developer API key (ny_live_...), a short-lived presigned S3 URL (maximum 15-minute validity), or an active, password-verified Share link token.
2. Public Storage Buckets (visibility: "public"):
   Objects are routed through public CDN edge nodes (assets.drive.nyotaimara.com). By setting an object or folder to public, you explicitly authorize Nyota Imara to serve those assets to the unauthenticated public internet. You assume full legal responsibility for all publicly exposed files.
3. Visibility Transition Mechanics:
   Changing an asset's visibility setting (private-to-public or public-to-private) executes an automated cross-bucket physical copy on Cloudflare R2 and permanently purges the source file from the origin bucket.

3. Zero-Egress Bandwidth Guarantee & Billing Rules

Nyota Drive eliminates traditional cloud egress bandwidth charges.

A. KES 0.00 Bandwidth Egress Fees

Customers pay strictly for stored gigabytes. Bandwidth transfer fees for downloads, public CDN asset delivery, or video streaming are KES 0.00 forever, regardless of transfer volume.

B. Storage Capacity Rates

• Monthly Billing: KES 10 / GB per month.
• Annual Billing: KES 100 / GB per year (16% annual savings).

C. Monthly Free Operation Allowances

Every Nyota Drive account includes generous monthly API operation allowances:

• 100,000 Class A Operations/month included free (writes, upload commits, folder mutations, state changes).
• 1,000,000 Class B Operations/month included free (reads, object downloads, metadata queries).

Excessive operations exceeding free allowances are billed to your Nyota Wallet as metered overage.

4. 2-Phase Upload Lifecycle & Expiration Rules

To prevent orphan file bloat and secure direct browser-to-R2 uploads, Nyota Drive enforces a strict 2-phase upload lifecycle:

1. Phase 1 — Reservation (POST /drive/files/upload/request):
   The API verifies workspace storage quotas and creates a pending reservation row in the database with an authorized presigned S3 PUT URL.
2. Phase 2 — Direct Binary Transfer:
   The client streams binary bytes directly to Cloudflare R2 storage servers using the presigned URL, bypassing the Nyota API gateway.
3. Phase 3 — Commitment (POST /drive/files/upload/commit):
   The client calls the commit endpoint. Nyota Drive executes a server-side S3 headObject check to verify physical byte sizes and activates the file record.

Abandoned Upload Reservation Purge

Presigned upload URLs expire after 1 hour. Uncommitted upload reservations are automatically marked as abandoned and permanently purged within 24 hours, releasing reserved storage quota back to the workspace balance.

5. Data Retention, Trash Lifecycle & Sandbox Purging

A. 30-Day Trash Lifecycle & Irreversible Purge

When a file or folder is deleted via the API or Web Dashboard:

1. The asset enters a soft-deleted Trash state and is hidden from standard directory listings.
2. Soft-deleted items remain fully recoverable by workspace administrators for thirty (30) calendar days.
3. On the 31st calendar day, automated background sweepers permanently and irreversibly purge the binary object from database indexes and Cloudflare R2 physical servers.
4. Purged files are mathematically and physically unrecoverable. Nyota Imara accepts no liability for data loss resulting from automated 30-day trash purging.

B. 24-Hour Test Sandbox Purge

All files and objects uploaded using Developer Test Sandbox keys (ny_test_...) are automatically and permanently purged from storage servers 24 hours after creation. Test files cannot be converted to public CDN links or transferred to live production buckets.

6. Acceptable Storage Use & Fair Usage Policy

In accordance with our Master Terms Acceptable Use Policy (AUP), you shall not use Nyota Drive to host, store, or distribute:

• Pirated media, cracked software, ransomware, or malware payloads;
• Child sexual abuse material (CSAM) or illegal content under Kenyan criminal law; or
• Open proxy mirrors or distributed denial-of-service (DDoS) reflection files.

Nyota Imara reserves the right to immediately suspend public CDN access or delete files that violate the AUP without prior notice.

7. Contact & Technical Documentation

For API integration guides, S3 SDK setup, or enterprise storage quota expansion (>100TB), visit:

• Nyota Drive Web Console: https://drive.nyotaimara.com
• Developer Documentation: https://docs.nyotaimara.com/docs/2-nyota-drive
• Legal & Compliance Office: legal@nyotaimara.com