Privacy policy — DRC Bridge Daily Backups
Last updated: 25 October 2026.
DRC Spares Ltd operates this private utility for its own catalogue backup and recovery. Contact simon@drcspares.co.uk about access, retention or deletion.
Google data and permissions
The utility uses the limited Google Drive drive.file permission. It creates a dedicated backup folder, uploads encrypted recovery files, and reads account identity, storage quota and relevant file metadata, including identifiers, names, sizes, checksums, folder membership and sharing status. It does not request unrestricted access to the account's Drive or read unrelated documents, email, contacts or calendar entries.
Purpose and use
Account identity is checked to avoid connecting the wrong account. File metadata is used to select the approved destination and verify backup transfers. Data is used only to provide and maintain the authorised backup and recovery functions. It is not sold, used for advertising or used to train general-purpose AI models.
Storage and security
Backup contents are encrypted before upload. Recovery material can include the Bridge catalogue, configuration and protected credential-recovery files. The owner must retain the separate recovery password securely. Encryption does not protect data from every risk on a compromised or unlocked source computer.
Google OAuth refresh credentials and the application's client secret are stored locally using Windows user-bound protection and restricted file permissions. Short-lived access tokens are used for requests and are not deliberately persisted. Operational receipts retain status and verification metadata rather than credential values.
Sharing and service providers
Google receives the encrypted backup files and the metadata necessary to store and transfer them. The utility requires its destination to be private and does not automatically publish files or create public sharing links. Authorised DRC Spares personnel may access recovery copies and operational records for recovery and support. Failure notifications use the owner's configured email provider.
Use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Retention and control
There is currently no automatic age-based deletion of backups or recovery evidence. The owner controls retirement and deletion of local and Google Drive copies. Revoking access through the Google Account's third-party connections stops future authorised access but does not delete existing backups. Contact the operator to arrange deletion or changes to retention. Recovery copies must be considered separately from the active database.