1. Application & Developer Association

This Privacy Policy applies to Bizsheet (also registered under Google Cloud Project ID: businessqb, Project Number: 402962874971), developed and operated by VS Groups. All references to "the Application", "we", "us", or "our" refer to Bizsheet.

2. What Google User Data We Access

When you authenticate using Google OAuth 2.0, our application accesses only the specific data items listed below:

• Basic Profile & Email: Your Google user ID, display name, verified email address, and profile picture URL.
• Application Spreadsheet (Google Drive): Sole access to create, read, and write within the dedicated business spreadsheet ("Business Billing Data") created by Bizsheet in your Google Drive.
• Gmail Send Permission: Temporary authorization to send an outbound email (quotation or invoice) directly from your connected Gmail address only when you click "Send Email".

3. How We Use Google User Data

We use your Google user data strictly and exclusively to provide and improve the application's core invoicing and billing services:

• Identity & Authentication: To verify your identity, secure your login session, and display your business credentials.
• Business Records Management: To write, read, and calculate your invoices, quotations, customer directory, payments, and expenses inside your personal Google Drive spreadsheet.
• User-Initiated Document Delivery: To transmit professional invoice or quotation emails to your clients through your authorized Gmail account upon your manual trigger.

Strict Limitation: We never use Google user data for advertising, marketing, user profiling, commercial resale, or any purpose unrelated to providing user-requested billing tools.

4. Sharing, Transfer & Disclosure of Google User Data

We do NOT share, transfer, disclose, or sell Google user data to any third party:

• No data is sold to advertisers, data brokers, or marketing networks.
• No data is transferred to third parties for secondary processing, profiling, or model training.
• Data transmission is strictly confined between your browser and official Google API endpoints (Google Drive, Gmail, Google OAuth) necessary to operate the service.

5. Data Protection Mechanisms for Sensitive Data

We implement rigorous technical and organizational safeguards to ensure all sensitive user data and credentials remain secure at all times:

• Encryption in Transit: All data exchanged between your browser, our application servers, and Google API endpoints is encrypted using modern Transport Layer Security (TLS 1.2 or TLS 1.3) protocols over HTTPS.
• Encryption at Rest: OAuth tokens, authorization credentials, and cached configuration data are encrypted at rest using industry-standard cryptographic algorithms (AES-256). All business records (customers, invoices, products, quotations) are stored directly inside your own Google Drive spreadsheet, safeguarded by Google's multi-layered enterprise infrastructure security.
• Access Control & Least Privilege: Access to user data is strictly segregated. Only the authenticated account owner has access to operations triggering reads or writes to their designated spreadsheet. No staff, third-party vendor, or unauthorized service has access to your private spreadsheet data.
• Secure Token Handling: OAuth refresh and access tokens are never transmitted to client-side code, never stored in publicly accessible repositories, and are immediately destroyed upon session logout or account deletion.

6. Artificial Intelligence (AI) & Machine Learning (ML) Policy & Limited Use Disclosures

In strict accordance with the Google Workspace API User Data and Developer Policy and its Limited Use requirements:

• No Third-Party AI Integrations: Bizsheet does NOT integrate with, transmit, or disclose any Google user data to any third-party AI/ML service providers (such as OpenAI, Anthropic, Mistral, Google Gemini API, etc.) or multi-model gateways/aggregators. No third-party AI subscriptions or API tiers (Free, Pro, or Enterprise) are utilized.
• No Foundational or Generalized Model Training: Under no circumstances is Google user data—including raw, aggregated, or derived data obtained via Google Drive, Google Sheets, or Gmail APIs—used, transferred, or sold to build, train, fine-tune, or improve foundational or generalized artificial intelligence or machine learning models.
• Offline & Local Infrastructure Processing: Any smart financial summaries, invoice calculations, and interactive assistant replies operate strictly as deterministic, rule-based computational algorithms executed 100% locally within our isolated backend infrastructure. Google user data is processed solely in real time in memory to return requested billing metrics and is never shared with external model providers for training, retraining, or secondary purposes.

7. Google API Limited Use Disclosure

Bizsheet's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Data Retention, Account Deletion & Right to Erase

You retain full ownership and control of your data at all times:

• Data Retention Period: Authentication session tokens are retained only for the duration of your active session or until you sign out or delete your account. Business data stored in your Google Drive remains there until you delete it.
• Instant Account Deletion: You can permanently delete your account at any time via the Settings page. This triggers an automated deletion of your Business Billing Data spreadsheet from Google Drive and immediately purges all authentication tokens and cached records from our servers.
• Google Permissions Revocation: You can also revoke Bizsheet's access to your Google account at any moment directly from your Google Account Permissions dashboard.

9. Contact Us

If you have any questions or security inquiries regarding this Privacy Policy or our data protection mechanisms, please contact our Data Protection Officer at vsgrpsemail@gmail.com.