Privacy Policy

1. Scope

This Privacy Policy explains how Shao Drive Sync, operated through https://market.shao.press, accesses, uses, stores and shares Google user data when a user authorizes Google Drive access.

2. Google user data accessed

Depending on the OAuth scope shown on Google's consent screen, the application may access Google Drive files, folders and file metadata needed to perform the synchronization operations configured by the account owner. This may include listing files, reading or downloading files, creating or uploading files, updating files, moving files, and deleting files when the user has configured an operation that requires deletion.

The application does not request Google account data for advertising, profiling, or unrelated purposes.

3. How Google user data is used

Google user data is used only to provide user-authorized Google Drive functionality, including:

• mounting or accessing an authorized Google Drive through rclone;
• synchronizing files and directories selected by the account owner;
• uploading application-generated market data, reports or archives;
• reading files when required for synchronization, verification or restoration;
• updating, moving or deleting Drive files when explicitly required by the configured synchronization workflow.

4. Storage and security

OAuth access and refresh credentials may be stored in the server-side rclone configuration so scheduled synchronization can continue after authorization. These credentials are not intentionally exposed to browser-side code or public pages. Application-generated data may be stored locally on the server and in the Google Drive account selected by the account owner.

Reasonable technical safeguards are used to reduce unauthorized access to credentials and synchronized data. No Internet-connected service can guarantee absolute security.

5. Sharing and sale of data

Google user data is not sold and is not used for targeted advertising. The service does not intentionally share Google user data with unrelated third parties. Data may be processed by infrastructure providers strictly as necessary to operate the self-hosted service, or disclosed when required by applicable law.

6. Google API Services User Data Policy

The application's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Revoking access

A user can revoke this application's access at any time from the security and third-party access settings of their Google Account. After access is revoked, the application can no longer obtain new Google Drive access tokens using the revoked authorization.

8. Data deletion

To request deletion of OAuth credentials or application-controlled data stored by this service, contact olypiggy@gmail.com. Files stored in the user's Google Drive remain under the user's Google account control and may also be deleted directly by the user.

9. Changes

This policy may be updated when the application's functionality or Google API usage changes. The effective date above will be updated when material changes are published.

10. Contact

Privacy questions: olypiggy@gmail.com