Driveinary Cloud Back to Home

Privacy Policy

Last updated: October 26, 2026

1. Overview

Driveinary Cloud operates under a Bring-Your-Own-Storage (BYOS) model. We provide an API layer and management dashboard that bridges client applications with your personal Google Drive storage. We prioritize minimal data collection and complete user data ownership.

2. Google User Data We Access

When you authenticate with Driveinary Cloud using Google OAuth 2.0, we request only the minimal scopes required to operate the service:

  • Email and Profile: Used strictly to identify your account and create your isolated tenant session.
  • Google Drive File Access (`https://www.googleapis.com/auth/drive.file`): We only request access to files and folders created by or opened with Driveinary. We cannot read, edit, or delete any other personal files, photos, or documents located elsewhere in your Google Drive.

3. How We Store and Protect Your Data

  • OAuth Refresh Tokens: All stored OAuth tokens are encrypted at rest using AES-256-GCM authenticated encryption before persisting to our database.
  • Uploaded Media Files: Driveinary does not permanently store your media files on application servers. Uploaded files are streamed directly into your designated Google Drive folder (`Driveinary_Media`).
  • Image Transformations: On-the-fly resized images (WebP/AVIF) are generated via Sharp and delivered through standard HTTP caching headers.

4. Google API Limited Use Disclosure

Driveinary Cloud complies with the Google API Services User Data Policy, including the Limited Use requirements:

  • We never transfer or disclose your Google user data to third parties.
  • We never use Google user data for advertising, marketing, or retargeting purposes.
  • We never use Google user data to train machine learning or artificial intelligence models.

5. Data Retention and Account Deletion

You maintain full control of your data. You can delete individual API keys or asset records directly from your dashboard at any time. If you wish to disconnect your Google account and remove all stored tokens from Driveinary, you may revoke permissions at any time via your Google Account Security Settings (`myaccount.google.com/permissions`).

6. Contact

If you have any questions about this Privacy Policy, you can reach out via GitHub at github.com/Yoepan/Driveinary.