Privacy policy

Google sign-in and permissions

Google sign-in requests basic identity information: your Google account identifier, email address and profile. The server verifies the account and allows only the configured owner. Your app session retains the authorised account identifier and expiry; it does not contain Google access or refresh tokens.

Financial access is granted separately by the owner. That connection requests read-only Google Sheets content and read-only Google Drive file metadata. The pilot reads the configured spreadsheet to display property records, income, expenses, loan information and source references. It does not request permission to edit Sheets, read Gmail or download original Drive files.

How information is used

Records are used to render the private dashboard, calculate the displayed estimates, inspect source records and provide exports requested by the owner. The app does not sell Google user data, use it for advertising or send it to AI models.

The app's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Storage and service providers

The original financial records remain in the existing Google Sheets and Drive resources under the owner's control. Vercel hosts the application and processes authorised requests. Private connection credentials, account settings and calculation defaults are retained in server-side configuration.

The app processes spreadsheet records on the server and returns them to the authorised browser. An export is saved to the device where the owner chooses to download it. The replacement app does not maintain a separate database of imported financial records.

Google provides sign-in and the source APIs; Vercel provides hosting. These providers may retain operational and security records under their own Google and Vercel privacy policies. Application authentication errors use generic messages rather than financial records or credentials.

Cookies and access

The app uses session and sign-in security cookies. The authenticated session lasts up to eight hours and is cleared when you sign out. Google and the hosting platform may also use their own cookies. The app does not add advertising or analytics trackers.

Revoking access and removing information

You can remove the app's Google connection in your Google Account connection settings. Revoking the data grant prevents future authorised source reads. Sign out to end an existing app session, and remove downloaded exports from your own device when no longer needed.

Revoking access does not delete your original spreadsheet or Drive documents. Their retention remains under your control. To request removal of retained app connection settings or ask a privacy question, use the support contact shown on the Google consent screen.

Changes to this policy

This page will be updated if the app's permissions or data handling change. Any later editing, import or document-delivery feature requires a separate review before activation.