To provide industrial inventory terminal features, our application requests access to the following specific Google API scopes and user data types:

• Google Drive Files (https://www.googleapis.com/auth/drive.file - Recommended Scope): Used to read, write, create, and open Google Sheets spreadsheet files that you explicitly authorize or select using the Google Picker API. This allows the application to manage and update your inventory records without accessing your other Drive files.
• Basic Profile Info (openid, email, profile): Accesses your primary Google account email, name, and profile picture to authenticate and verify user sessions inside the application.

We use the accessed Google user data exclusively for functional, user-initiated purposes:

• Inventory Synchronization: To display stock counts, calculate Days of Inventory (DOI), and perform automated stock replenishment calculations inside the app.
• Real-time Stock Updates: To modify cell values in your connected Google Sheets when a user runs barcode scans, voice dictations, or uploads image receipts parsed transiently by Optical Character Recognition (OCR).
• Session Security: Using your email to secure your account, prevent unauthorized entries, and link your session safely.
• No Non-Functional Uses: We do not use Google user data for any other purposes. The app has no advertising, no tracking of users across other apps/websites, and does not build advertising profiles.

Your privacy and data sovereignty are guaranteed by design through strict storage and safety practices:

• Data Security (Protection): All communications between CyberStock-IA and Google APIs are encrypted in transit using industry-standard Transport Layer Security (TLS 1.2 or 1.3) via HTTPS protocol.
• Transient Spreadsheet Processing: CyberStock-IA does not save, cache, or maintain your spreadsheet rows or Google Drive files on our backend servers. All sheet calculations are processed transiently in-memory and discarded. Your Google Drive is the sole source of truth.
• Secure Token Storage: Google OAuth credentials (access and refresh tokens) are stored securely on the client-side device using encrypted browser LocalStorage or SessionStorage. No credentials are stored on external database servers.
• Retention Policy: Authentication tokens and profile details are retained only while your user account is active. In-memory spreadsheet data is deleted instantly upon the completion of each user request.
• Data Deletion Request Process: You can disconnect and revoke access at any time via your Google Account Security settings (https://myaccount.google.com/permissions). Additionally, you can request the deletion of all session credentials and profile data by emailing kensnttorres@gmail.com. All deletion requests will be completed within 24 to 48 hours.

CyberStock-IA has a strict zero-sharing policy with third parties:

• No Sharing with Specific Categories of Third Parties: We do not share, sell, rent, lease, or transfer Google user data to any third-party categories, including:
  • Advertising networks and marketing agencies.
  • Data brokers, analytics platforms, and user trackers.
  • External developers or third-party cloud database providers.
• No AI/ML Model Training: Your Google Workspace data, spreadsheet contents, and associated files are not used to train or refine artificial intelligence (AI), machine learning (ML), or large language models (LLMs).