Privacy policy

1. Operator and purpose

The operator uses AH VPS Backup for a personal automation environment. The utility creates and maintains encrypted backup snapshots in the operator’s Google Drive and retrieves them for integrity checks and recovery. Contact: my.external.device@gmail.com.

2. Google data accessed

The utility requests https://www.googleapis.com/auth/drive.file. It uses this permission to create, list, read, update and delete backup files and folders created by, or explicitly authorized for, this application. It processes file identifiers, names, sizes, timestamps, available checksums and content as needed to transfer, verify and restore its backups.

Google OAuth access and refresh tokens allow the utility to act with the account owner’s consent. The application’s Google access is limited to the requested scope and the authorization granted by the owner.

3. Backup content and storage

The operator selects server files, application data, database exports and configuration for backup. Those selections may contain sensitive information. Restic encrypts backup content and internal backup metadata before rclone transfers the repository data to Google Drive.

Google can process account, request and storage metadata such as object sizes and transfer times as part of delivering its service. Backup preparation may also use bounded temporary files or caches in the owner-controlled environment.

4. Use and sharing

Google user data is used for backup storage, repository maintenance, integrity verification and recovery. The operator does not sell Google user data, use it for advertising or use it to train AI models. Google processes stored data and requests as the storage provider. Server hosting providers supply the infrastructure on which the operator runs the utility.

Access to backup data is intended for the operator and people the operator explicitly authorizes. The public information website does not provide access to the private backup repository or its credentials.

AH VPS Backup’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

5. Credentials and security

OAuth credentials and backup secrets are maintained in the owner-controlled operating environment. The operator is responsible for restricting access to these credentials, protecting recovery information and testing restoration. Credentials are not embedded in this website.

Encryption protects backup confidentiality. Protection also depends on the security of the Google account, operating environment and recovery secrets. No storage or security measure can guarantee protection against every failure or compromise.

6. Retention and deletion

The operator determines backup scope and retention. Backup snapshots may retain earlier versions until the operator removes them under the chosen retention policy. The operator can delete backup data using the backup utility or Google Drive, subject to Google’s deletion, trash and retention behavior.

Revoking authorization prevents further authorized API access but does not automatically delete previously stored backups. The operator can remove OAuth credentials from the operating environment separately.

7. Revoking access and contacting the operator

The account owner can revoke this application’s access through Google Account third-party connections. Requests or questions about data access, correction or deletion can be sent to my.external.device@gmail.com.

8. This information website

These static pages contain no application sign-in form, backup upload form, advertising code or analytics scripts. Cloudflare hosts the pages and may process technical request information, including IP addresses and security logs, to deliver and protect the website under its privacy policy.

9. Policy changes

The operator will update this policy when the utility’s data handling changes. The effective date at the top identifies the current policy.