Privacy policy
How Google user data is handled
Effective October 14, 2026
Cloud Asset Manager Backup is private, self-hosted software operated for its owner’s personal use. It uses Google Drive only to store and recover encrypted database backups.
Information accessed
The application accesses the following information after the owner grants consent:
- The Google account email address, used to identify the connected backup account.
- Files and folders created by this application, including their identifiers, names, sizes, checksums, and timestamps.
- An OAuth refresh token, stored encrypted on the owner-controlled server so scheduled backups can continue without repeated sign-in.
The application requests the narrow drive.file scope. It does not request
permission to browse or read unrelated files in the owner’s Google Drive.
How information is used
Google user data is used only to:
- Create and update encrypted database backup files.
- List recovery points previously created by the application.
- Download a selected recovery point when the owner requests restoration.
- Delete older application-created recovery points under the retention policy.
Google user data is not used for advertising, profiling, analytics, or training. It is not sold, rented, or shared with third parties.
Storage and security
Database recovery bundles are compressed, authenticated, and encrypted on the owner-controlled server before upload. The server stores encrypted OAuth credentials and minimal operational metadata such as Drive file identifiers, hashes, and backup timestamps. The public information site does not receive backup content or OAuth tokens.
Retention and deletion
The application maintains one replaceable latest backup and a bounded history of up to 30 recovery points or 1 GiB of managed backup storage, whichever limit is reached first. Unchanged database content is not uploaded again.
The owner can delete individual recovery points, disconnect Google Drive in the private dashboard, delete the application’s backup folder in Google Drive, or revoke access from their Google Account permissions at any time.
Public site hosting
This notice is served by Cloudflare Pages. It uses no application cookies, forms, advertising, or client-side analytics. Cloudflare may process routine network and security information as the hosting provider under its own privacy terms.
Contact
For questions about this policy, contact the application operator using the support email displayed on the Google OAuth consent screen.
Changes to this policy
Material changes will be published on this page with an updated effective date before they apply to future use of Google user data.