Privacy policy.

1. Google data we access

The Google OAuth application NovaLab KAN requests https://www.googleapis.com/auth/drive.file. This permits access to files created by the app or explicitly authorized for use with it. It does not grant unrestricted access to every file in a Google Drive account.

Within that permission, KAN handles evidence files and collection receipts, their contents, and metadata such as file IDs, names, MIME types, parent folders, sizes, and storage or verification status. Evidence may include marketing material, source references, capture timestamps, and related project information.

Google provides access and refresh tokens so the authorized application can operate and renew access while the grant remains valid. KAN does not collect your Google password.

2. How we use the data

• Store marketing evidence and collection receipts in the authorized Drive location.
• Read file metadata and saved contents to verify successful storage, integrity, and source traceability.
• Support authorized project review, reporting, troubleshooting, and the development of partner marketing analysis.

Google user data is not sold, used for advertising or ad targeting, or used by KAN to train generalized artificial intelligence or machine-learning models. NovaLab KAN’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

3. Storage and access controls

Operational evidence is stored in the authorized Google Drive account and may also be retained on the project’s managed computer and in operational backups. Files may contain business information and are kept separate from this public website.

OAuth credentials are held on the managed computer in an owner-restricted location separate from evidence packages. The current implementation protects those files with operating-system file permissions; it does not use application-level encryption for those credential files. Credentials are not included in public site code.

Access to operational records is limited to the account holder and people authorized to work on the project. The project operator can review evidence to provide the requested workflow, investigate a problem, or respond to an account-holder request.

4. Sharing and service providers

Google processes the data needed to provide authentication and Drive storage. Authorized project operators may use productivity and AI assistance tools, including ChatGPT, to review selected project material, troubleshoot, or prepare requested reports. Such use must remain within the account holder’s authorization and the purposes described here.

Selected evidence may be shared with team members authorized by the account holder. KAN does not automatically make Drive files public. Information may also be disclosed when required by applicable law. This public website is hosted through OpenAI Sites and its infrastructure providers; website hosting is separate from the native Drive connection.

5. Retention, deletion, and revocation

Evidence and receipts are retained while needed for the authorized project, verification, or recordkeeping. To request deletion of KAN-controlled copies or ask about retention, contact pinto.alvaro911@gmail.com. The operator will review the request, confirm which records are affected, and explain any records that must be retained. Backup copies may persist until they are overwritten or removed through the backup retention process.

You can revoke the application’s access in Google Account → Third-party connections. Revocation stops future authorized API access; it does not automatically delete files already stored in Drive, local evidence, or backups. You may delete files you control in Drive and contact the operator regarding other KAN-controlled copies.

6. Visiting this website

The site contains information and email contact links. It does not include an application sign-up form, advertising pixels, or analytics scripts added by KYO. The hosting provider may process technical information such as IP addresses, browser information, and request logs to deliver and secure the site. Clicking an email link opens your email application; information you send is used to respond to your message.

7. Changes and contact

This policy will be updated when KAN’s data practices change. The effective date above identifies the current version. New uses of Google data will require appropriate disclosure and authorization.

Operator: Álvaro Pinto, KYO / NovaLab KAN
Privacy and support: pinto.alvaro911@gmail.com