Privacy policy
Email notifications
When reminders are enabled, the application stores the recipient address, settings and sending-attempt history. Messages pass through hosting and email providers and contain the task name, date, link and reminder text. The optional iCalendar attachment contains this information as a calendar entry. Scheduled sending can be disabled in notification settings.
Operator and scope
Dominik Jar / KEBOdesign is responsible for data processing in this installation. Contact: kebodesign@gmail.com. This policy describes KEBO Projects and its Google Drive integration.
Data processed
The application stores client and project data entered by the operator, quotes, statuses, notes, deadlines and time measurements. When Google is connected, it processes the connected account ID and email address, authorization tokens, and file and folder information: IDs, names, types, sizes, dates, links and permissions. Uploaded file contents pass through the application server to Google Drive. The application does not receive the Google account password.
Purposes and Google access
Data is used to deliver and account for projects, plan work and manage files at the operator’s request. Google access is granted through the OAuth consent screen and includes broad Drive access, including pre-existing files. The application uses it to manage linked folders, upload files, create folders, share links and move items to trash. Google data is not used for advertising, data sales or training AI or machine-learning models.
Storage and security
Operational data is stored in an SQLite database on the KEBO Projects hosting server. Google tokens are encrypted in the database; the key is held separately on the server. Google Drive is the destination for uploaded files. The server relays file chunks and stores information needed to resume uploads. Application access requires sign-in, and communication with Google uses HTTPS. Database backups may include data and encrypted tokens.
Data sharing
The application hosting provider and Google, as the Drive and authorization provider, participate in processing. Authorized operators can access data needed to handle projects. Sharing a folder using “anyone with the link” enables access for anyone holding that link, subject to Google Drive permissions. Sharing is an operator action; internal notes and the calendar are not included in a folder link.
Retention and deletion
Project data is retained while needed for delivery, accounting and archives. Hiding a client or period does not permanently erase its data. Contact the operator to request access, correction or deletion of data and backups. Disconnecting the account in the application removes the stored connection but does not delete Drive files or archived project data. Access can also be revoked in Google Account connections at https://myaccount.google.com/connections. Trashed files are subject to Google Drive retention rules.
Processing grounds and your rights
Contact and project data is processed to perform contracts, meet accounting obligations and pursue legitimate interests in organizing work and protecting projects. OAuth authorization allows the application to act on the Google account and can be revoked. Where applicable, you may request access, correction, erasure, restriction or portability, object to processing and complain to the Polish data protection authority (UODO). Send requests to kebodesign@gmail.com.
Cookies and logs
The working application uses cookies for sign-in sessions and preferences such as language, the last client and calendar view. Public information pages do not set cookies and contain no analytics or advertising. Hosting may record technical request logs, including IP address, time and requested page.
Limited Use of Google data
KEBO Projects’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google Workspace APIs is not used to develop, improve or train generalized AI/ML models.