Privacy Policy

1. Who operates the connector

CHT — Centrum voor Hypnose en Therapie operates the CHT AI Brain OS Backup Connector as a private, owner-controlled infrastructure utility. Contact: info@cht-helps.com.

2. What Google data is accessed

The connector uses the Google Drive API with the restricted https://www.googleapis.com/auth/drive.file OAuth scope. This scope permits access to Drive files the app creates or the account holder explicitly makes available to it. The connector is not configured to request full Google Drive access.

During backup operations, the connector may process file names, folder paths, file contents and associated metadata for the authorized backup objects. It may also process the account authorization information necessary to connect to Google Drive.

3. How data is used

Google Drive access is used to create, list, upload, download, verify and manage authorized backup objects for the owner's backup and recovery workflow. It is not used for advertising, profiling or model training.

At present, only synthetic infrastructure tests have been conducted through the connector; unattended production backups are disabled.

4. Storage and protection

Backup contents are encrypted on the local machine using restic before cloud upload. The Google OAuth authorization is stored in a locally encrypted rclone configuration, protected by a local Windows-account-based mechanism. The Google Drive service stores the encrypted backup objects uploaded to it.

Local backup data and configuration are stored on the operator's computer. Access to the local machine, recovery credentials, and cloud account remains security-sensitive; encryption does not eliminate all risks.

5. Sharing and disclosure

The connector communicates with Google Drive as a storage provider. It also supports Microsoft OneDrive as a separate storage destination. The operator does not sell Google user data or use it for advertising. Data may be disclosed where legally required or as necessary to provide storage through the chosen service providers.

6. Retention and deletion

The currently uploaded synthetic test backups are retained until the operator manually removes them. If an automated retention process is approved later, this notice will be updated before activation. No automatic retention or deletion schedule is currently represented as active. Revoking Google authorization stops future authorized API access, but does not automatically remove previously uploaded files. The account owner can remove backup objects from the relevant Drive account.

7. Control and contact

The account owner can revoke Google authorization in Google account settings and contact the operator to request information or deletion of connector-managed files. The operator will evaluate and handle requests within the applicable access and legal constraints. Because this is a private utility, it does not offer public accounts or general-user registration.

Contact: info@cht-helps.com