Privacy Policy

Who operates DriveDash

DriveDash is operated by Shubham Mathur, an individual developer. For privacy questions or deletion requests, contact mathurshubham@gmail.com.

Google data we access

When you sign in with Google, DriveDash requests access to:

• Your Google Drive files — metadata and content — via the drive scope.
• App configuration stored in your hidden Drive appDataFolder via the drive.appdata scope.
• Your name and email address via openid, email, and profile.

How we use it

DriveDash uses this data only to search, open, download, share, and copy files in your own Google Drive when you explicitly ask it to. We do not read your files for any other purpose.

What is stored and where

DriveDash stores no Drive content and no Google tokens on its servers. Your session is kept in an encrypted cookie in your browser. Your pinned hot list and your share log (a record of the links and email shares you created from the app, including any optional message you typed) are JSON files in your own Google Drive appDataFolder — they stay in your account, not on our infrastructure.

The only data held on our infrastructure is a registry of the Google accounts that have signed in: email address, display name, first and last sign-in time, and whether an administrator has disabled the account. It is stored in Cloudflare Workers KV, capped at a small number of accounts, and visible only to the app's administrator.

What we do not do

• We do not sell your data.
• We do not use your data for advertising.
• We do not share your data with third parties.
• We do not use your data to train AI models.
• We do not access your Drive except when you take an action while signed in as yourself.

Google API Services User Data Policy

DriveDash's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. See the Google API Services User Data Policy.

How to revoke / delete

In the app, Menu → Delete my data removes your shelves, share log, seat and DriveDash's access in one step.

You can also remove DriveDash's access to your Google account at any time from Google Account permissions.

Retention

• Session cookies expire after 30 days.
• Your hot list and share log files in appDataFolder persist until you remove the app's data or delete those files yourself. Share log entries are kept as history (capped at 500) so you can see what was shared and when.
• Registry entries persist until an administrator removes them; removal frees the seat. To have yours removed, email the address above.