Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

1. Data We Access
Our application accesses the following Google user data:

Google Sheets data (read/write access to spreadsheets you own or have access to)
Basic profile information (name, email address)
Authentication tokens for maintaining your session
Google Drive files (only files you specifically select or create through our app)

2. How We Use Your Data
We use the data we collect to:

Provide and improve our Google Sheets and Drive integration services
Enable you to view and edit your spreadsheets directly within our platform
Create and modify files in your Google Drive with your permission
Maintain the security and integrity of our services
Provide customer support and respond to your inquiries

3. Data Sharing and Disclosure
We do not sell, trade, or otherwise transfer your Google user data to outside parties except in the following cases:

Service Providers:
We may share data with trusted third parties who assist us in operating our website and services, as long as those parties agree to keep this information confidential.
Legal Requirements:
We may disclose your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety.

4. Data Protection
We implement a variety of security measures to maintain the safety of your personal information:

All data is encrypted in transit using SSL/TLS protocols
Access to Google user data is protected by OAuth 2.0 authentication with limited scope access
We implement strict access controls and authentication measures
Regular security audits and monitoring are performed
Access controls and authentication for all systems handling user data

5. Data Retention and Deletion
We retain Google user data only for as long as necessary to provide our services and fulfill the purposes outlined in this policy.

Types of Google User Data Retained:

Authentication Tokens: OAuth 2.0 access tokens are typically short-lived and used for the duration of an active session. Refresh tokens, which allow our application to obtain new access tokens, are stored securely (e.g., encrypted) and are retained until you explicitly revoke our application's access to your Google account or delete your account with our service.
User Profile Information: Basic Google profile information (name, email address) linked to your account with our service is retained as long as your account remains active.
Google Sheets and Google Drive Data: We do not permanently store copies of your Google Sheets or Google Drive files on our servers. Our application accesses this data in real-time or caches it temporarily to provide our services. Any temporary caches are cleared regularly (e.g., within 24 hours or upon session termination). Metadata about files you've accessed or linked (e.g., file IDs, names) may be retained as long as your account is active to facilitate easy access.

Purpose of Retention:

Authentication tokens are retained to maintain your session and allow our application to interact with Google APIs on your behalf without requiring you to re-authenticate repeatedly.
User profile information is retained for account management and communication purposes.
File metadata is retained to provide a seamless user experience and quick access to your linked files.

Duration of Retention:

Active User Data: Google user data associated with an active account is retained as long as the account is active or until you request deletion or revoke access.
Application Logs: Logs related to Google API access (which may include anonymized or aggregated data) are retained for a maximum of 90 days for security, debugging, and service improvement purposes. These logs do not contain raw Google user file content.

User-Initiated Deletion:

You can request the deletion of your Google user data associated with our service at any time by contacting us at admin@zell724.com.
You can revoke our application's access to your Google account at any time through your Google Account settings ([https://myaccount.google.com/permissions](https://myaccount.google.com/permissions)). Revoking access will prevent our application from accessing your Google data further. Upon revocation, we will initiate the deletion of associated refresh tokens and any directly linked metadata from our active systems.

Deletion Process and Timeline:

Upon receiving a valid deletion request or access revocation, we will delete the specified Google user data from our active databases and systems within 30 days.
Data may persist in backup archives for an additional period (e.g., up to 60 days) but will not be used for operational purposes and will be overwritten according to our backup rotation schedule.
Please note that deleting data from our service does not delete the original files from your Google Drive or Google Sheets. You must manage those files directly within your Google account.

6. Your Rights
You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Withdraw consent for data processing
Lodge a complaint with a data protection authority

7. Changes to This Policy

We may update this policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.