Privacy Policy

Privacy Policy for AI Track Lock (Google Workspace Add-on)

Last Updated: June 24, 2026

AI Track Lock is committed to protecting the privacy and security of independent creators, producers, and media professionals globally. This Privacy Policy explicitly details how our Google Workspace Add-on interacts with your data.

1. Google API Services User Data Policy & Limited Use Disclosure 

AI Track Lock's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2. Information We Collect and How We Use It 

AI Track Lock operates on a localized, zero-retention data framework. To provide digital asset protection, our application requests access to the following explicit Google Workspace scopes:

• https://www.googleapis.com/auth/drive.file: This scope allows the Add-on to view the specific file you select inside your Google Drive. This interaction is limited to reading the essential file data required to calculate its local, unique SHA-256 cryptographic hash string.

• https://www.googleapis.com/auth/script.send_mail: This scope allows the application to programmatically send email directly from your account. It is utilized solely to deliver your finalized PDF Vault Certificates and cryptographic receipts directly to your inbox.

• https://www.googleapis.com/auth/userinfo.email: This scope allows the Add-on to view your primary email address. This is used exclusively to identify your session and properly attribute account-level asset ownership on your generated vault documentation.

3. Data Protection, Storage, and Retention

• Data Sharing, Transfer, and Disclosure: AI Track Lock operates on a strict zero-knowledge cryptographic architecture. We explicitly do not share, transfer, sell, or disclose any Google user data (including Google Drive media files, email contents, metadata, or locally generated SHA-256 hashes) to any third parties, external organizations, or AI training models. All data processing and cryptographic hashing are executed entirely client-side within your local browser environment.

• Data Protection & Security Mechanisms: AI Track Lock is committed to the highest level of data security. All file processing, including the generation of SHA-256 cryptographic hashes, is executed entirely client-side utilizing the browser's native Web Crypto API. At no point are your original media files, Google Drive contents, or sensitive personal data transmitted to, processed by, or stored on any external servers. All communication between the application interface and Google Workspace APIs is strictly transmitted over secure, industry-standard encrypted TLS/HTTPS protocols.

• Data Retention & Deletion Policy: AI Track Lock operates on a strict zero-retention architecture regarding Google user data. We do not collect, retain, cache, or store your Google Drive files, email contents, or personal identity data beyond the localized, ephemeral session required to generate your ledger receipt. The only data logged is the mathematical cryptographic hash of the asset. Users retain absolute control and may revoke the application's OAuth access at any time via their Google Account Security settings. Upon revocation, all access ceases immediately, as we hold no retained repository of your private Google data.

• No AI Training or Model Development: We strictly do not use data obtained through Google APIs to train, tune, or develop artificial intelligence, machine learning, or large language models.

• No Data Selling or Advertising: We do not sell, trade, or lease your personal information, email, or metadata to third-party data brokers. Your data is never used to train advertising models or serve targeted ads.

4. Third-Party Services 

We utilize Stripe to process secure payments. Your interaction with Stripe is governed entirely by Stripe’s security protocols, and no Google account data or file metadata is ever shared with the payment gateway.