Privacy Policy

1. Data Collection & Account Usage

When you register or use Auto Quote, we collect essential account details including your name, email address, workspace preferences, and basic application telemetry. This data is used strictly to provide workspace functionality, manage billing subscriptions, and authenticate user sessions.

2. Google Drive API & Scope Usage

Auto Quote offers an optional Google Drive integration. In adherence to Google's Principle of Least Privilege, we request strictly per-file access via the following OAuth scope:

Explicit File Selection via Google Picker: Auto Quote accesses only the specific files you explicitly choose through the Google Picker UI.

No Browsing or Scanning: We do not scan, browse, list, or index your Google Drive. Auto Quote receives access exclusively to the specific file IDs returned by the Google Picker when you explicitly submit them.

3. Google User Data Policy & Limited Use Compliance

Auto Quote's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:

• No AI Model Training: Google user data and Workspace document contents accessed via Google APIs are NEVER used to train, retrain, or improve generalized or foundational AI/ML models.
• No Third-Party Sharing: We do NOT sell, trade, rent, or transfer Google user data to third parties, advertising networks, or data brokers.
• No Advertising Usage: Google user data accessed via Google APIs is never used for serving advertisements or targeted marketing.

4. Token Disconnection & Account Data Purge

We maintain clear policies regarding token revoking and complete data removal:

• Google Drive Disconnection: Users can disconnect Google Drive at any time via Workspace Settings > Integrations or by revoking access in Google Account Security Settings. Whenever a user disconnects Google Drive, their Google OAuth access token and refresh token are immediately and permanently removed from our databases.
• Complete Data Purge on Account Deletion: All chunked document data, text segments, and vector embeddings stored in our database are permanently deleted whenever a user deletes their account via Profile > Delete Account & All Data.

5. Data Protection & Encryption

We employ industry-standard SSL/TLS encryption in transit and AES-256 encryption at rest, stringent access controls, and periodic security reviews to protect user data from unauthorized access or disclosure.