BLUE HAT Drive Backup Privacy PolicyEffective date: 9 September 2026This Privacy Policy explains how BLUE HAT Belgique SRL ("BLUE HAT", "we", "us") accesses, uses, stores, protects, retains, and deletes Google user data through the BLUE HAT Drive Backup application.1. Purpose of the applicationBLUE HAT Drive Backup is an internal business-continuity application used solely to create controlled backup copies of files held in BLUE HAT’s official Google Drive repository.2. Google user data accessedThe application requests read-only access to Google Drive. This permits it to view file and folder metadata and to download file content for backup purposes. The application does not request permission to create, modify, rename, move, share, or delete content in Google Drive.3. How Google user data is usedGoogle Drive data is used exclusively to produce scheduled corporate backup copies, verify backup completeness and integrity, and support recovery or business continuity when required. The data is not used for advertising, profiling, marketing, automated decision-making, or any unrelated purpose.4. Processing and storageThe backup process runs through rclone on a laptop controlled by BLUE HAT. Files may be exported from Google-native formats into standard document formats and packaged into encrypted-transfer-ready backup archives. The resulting backup copies, manifests, integrity hashes, and operational logs are transferred to a Box storage account controlled by BLUE HAT.5. Sharing and disclosureBLUE HAT does not sell Google user data. Google user data is not shared or disclosed to third parties for advertising, marketing, or independent commercial use. Data is transmitted only to service providers required to operate the authorised backup process, including Google Drive and Box, subject to their applicable terms and security controls, or when disclosure is required by law.6. Security measuresBLUE HAT applies access controls, least-privilege permissions, read-only Google Drive authorisation, encrypted network transport, integrity verification, controlled device access, and restricted access to backup storage. OAuth credentials and operational access are limited to authorised personnel.7. Retention and deletionBackup copies are retained only while needed for business continuity and within the available capacity of the approved backup storage. Retention is managed dynamically so that the latest successful backup is preserved while older backup sets may be deleted when storage capacity requires it. Backup data may also be deleted when no longer operationally necessary or following termination of the application. Revoking Google access prevents future collection but does not automatically delete backup copies already created; deletion requests may be submitted using the contact details below.8. User control and revocationAuthorised users may revoke the application's access at any time through the security and third-party access settings of their Google Account. After revocation, the application can no longer access or download Google Drive data unless access is granted again.9. Google API Services User Data PolicyBLUE HAT's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.10. Changes to this policyThis policy may be updated when the application, its data-handling practices, applicable requirements, or service providers change. The effective date above will be revised when material changes are published.11. ContactFor questions, access revocation support, or deletion requests relating to BLUE HAT Drive Backup, contact BLUE HAT Belgique SRL at [email protected].