Privacy Policy

1. Introduction

Cloud Aggregator ("we", "our", or "us"), accessible at www.cloudaggregatorapp.com, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service to manage and interact with your Google Drive accounts.

2. Information We Collect

When you use Cloud Aggregator, we collect and process the following information:

• Google Account Information: Email address, profile information, and authentication tokens obtained through Google OAuth.
• Google Drive Data: File names, folder structures, file metadata, and storage usage from the Google Drive accounts you choose to connect.
• Usage Data: Information about your interactions with our service, including copy operations, file management actions, and quota usage.

Important: We use the drive.file OAuth scope, which means we only access files you explicitly select via Google Picker or files that you create through our service. We cannot see or access your entire Google Drive—only the specific files you choose to work with.

3. How We Use Your Information

We use your information solely to provide and improve our service:

• Service Delivery: To authenticate your identity, connect to your Google Drive accounts, and perform file operations that you explicitly request (copy, rename, download, view).
• Duplicate Detection: To analyze file metadata and prevent unnecessary duplicate copies.
• Quota Management: To enforce plan-based limits and track your usage of copy operations.
• Service Improvement: To understand usage patterns and improve service performance and reliability.

We do not:

• Sell your data to third parties
• Use your data for advertising purposes
• Access your files without your explicit action
• Share your data except as required by law or as necessary to provide the service

4. Google API Services User Data Policy

Cloud Aggregator's use of information received from Google APIs complies with the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

We access Google user data only to provide the user-facing features explicitly requested by the user (such as selecting files via Google Picker and performing requested copy/rename actions). We do not use Google user data to develop, improve, or train generalized artificial intelligence (AI) or machine learning (ML) models.

We do not transfer Google user data to third parties except as necessary to provide the service or as required by law. Google user data is accessed only when you explicitly initiate an action in the app and is not retained longer than necessary to complete the requested operation.

5. Data Storage and Security

We implement industry-standard security measures to protect your information:

• All data transmission is encrypted using HTTPS/TLS
• Authentication tokens are securely stored and encrypted
• Access to your data is restricted to authorized service operations only
• We use Supabase for secure data storage with row-level security policies

6. Data Retention

We retain your information only for as long as necessary to provide our services:

• Active Accounts: Account data and usage history are retained while your account is active.
• Operational Data: File operation logs are retained for 30 days for troubleshooting and service improvement.
• Deleted Accounts: When you delete your account, we remove your personal data within 30 days, except where retention is required by law.

7. Third-Party Services

Cloud Aggregator integrates with the following third-party services:

• Google Drive API: To access and manage your Google Drive files
• Supabase: For secure authentication and data storage
• Vercel: For application hosting and delivery

These services have their own privacy policies and data handling practices. We recommend reviewing their policies.

8. Your Rights and Choices

You have the following rights regarding your data:

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and associated data at https://www.cloudaggregatorapp.com/data-deletion (see our Data Deletion Instructions)
• Revoke Access: Disconnect your Google account at any time through your Google Account settings
• Data Portability: Request your data in a portable format

9. Children's Privacy

Cloud Aggregator is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. Your continued use of Cloud Aggregator after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@cloudaggregatorapp.com

12. Compliance

Cloud Aggregator complies with applicable data protection laws, including:

• General Data Protection Regulation (GDPR) for European users
• California Consumer Privacy Act (CCPA) for California residents
• Google API Services User Data Policy