Privacy Policy

DriveNest (https://drivenest.app) · Effective date: October 11, 2026

Summary. DriveNest lets you connect Google accounts and browse the names, types, dates, sizes and links of your Google Drive files in one list. It has read-only access to file metadata only. It cannot read the contents of your files or change, share or delete anything. We do not sell your data, use it for advertising, or store your file listings. You can disconnect an account at any time.

1. Who we are

DriveNest is a web application operated by its developer (“DriveNest”, “we”, “us”). This policy explains what information the service accesses, why, how it is stored and protected, who it is shared with, and the choices you have. Contact: support@drivenest.app.

2. Information we access and collect

2.1 Google user data (accessed through Google APIs, with your permission)

Data	Google scope	Why we need it
Your Google account email address and, if provided by Google, your display name	`openid`, `email`	To identify each Google account you connect and show which account every file belongs to.
Google Drive file and folder metadata: ID, name, type (MIME type), last-modified time, size, web link, icon link, thumbnail link and parent folder	`https://www.googleapis.com/auth/drive.metadata.readonly`	To list files and folders, let you open folders, search the list by name, and open a file in Google Drive using its link.
OAuth access and refresh tokens issued by Google for your account	Issued for the scopes above	To call the Google Drive API for you while your session is active. Tokens are never shown to your browser.

The Drive metadata scope is read-only. It does not allow DriveNest to read the content of your files, or to create, edit, move, share, upload or delete anything in your Google Drive.

2.2 Technical information

Session cookie (mydrivehub.sid): a random identifier, marked HTTP-only and secure, that keeps you signed in. It does not contain your email or tokens.
Operational logs: our hosting providers and servers may process technical data such as IP address, request time and error messages to run, secure and troubleshoot the service. We do not write Google tokens or file listings to our logs.

2.3 What we do not collect

We do not access the contents of your files, your contacts, calendar, email, location or payment information. We do not use advertising or tracking cookies, and we do not run third-party analytics on the service.

3. How we use information

We use Google user data only to provide and improve the user-facing features described above: connecting accounts, listing files and folders, searching the displayed list, switching between accounts, opening files in Google Drive, and keeping the service secure. We do not use Google user data for advertising, profiling, credit or lending decisions, or to build or train generalized AI or machine-learning models.

4. Google API Services User Data Policy (Limited Use)

DriveNest’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

We only use Google user data to provide or improve the user-facing features described in this policy.
We do not transfer Google user data to others except as necessary to provide the service, to comply with applicable law, or as part of a merger or sale with notice to users.
We do not use or transfer Google user data for serving advertisements.
We do not allow humans to read Google user data unless we have your affirmative consent for specific items, it is necessary for security purposes (such as investigating abuse), or it is required by law.

5. How data is stored and protected

Connected account details (email, name) and Google OAuth tokens are held in a temporary server-side session stored in a Redis database used for sessions. They are not stored in a permanent user database.
Sessions expire automatically one hour after they start. When a session expires, the stored account details and tokens are removed and you must sign in again.
Drive file metadata is requested from Google each time you browse and is sent directly to your browser. We do not store or keep copies of your file listings.
All traffic between your browser, DriveNest and Google is encrypted using HTTPS. Access to our servers and infrastructure accounts is restricted to the developer.

6. Sharing and disclosure

We do not sell, rent or trade your personal information or Google user data. We share information only with service providers that help us operate DriveNest, and only as needed to provide the service:

Google – sign-in and the Google Drive API.
Cloudflare – hosting and delivery of the website.
Render – hosting of the backend (API) server.
Our managed Redis provider – temporary session storage.

We may also disclose information if required by law or valid legal process, or to protect the rights, safety and security of users and the service.

7. Retention and deletion

Account details and tokens are kept only for the life of your session (up to one hour) and are then deleted automatically.
Selecting Disconnect next to an account in DriveNest removes that account and its tokens from your session immediately.
We keep no copy of your Drive file metadata after you leave a page.
Routine operational logs kept by hosting providers are retained only for the period set by those providers.

8. Your choices and rights

Disconnect any account inside DriveNest at any time.
Revoke access in your Google Account at myaccount.google.com/permissions. Choose DriveNest, then “Delete all connections”.
Request access, correction or deletion of any personal data we hold about you by emailing support@drivenest.app. Depending on where you live (for example under the GDPR or similar laws), you may have additional rights, and you may contact us to exercise them. We will respond within a reasonable time.

9. Cookies

DriveNest uses a single strictly necessary session cookie to keep you signed in. We do not use advertising, analytics or cross-site tracking cookies.

10. International processing

Our service providers may process data on servers located in countries other than your own. We rely on providers that apply appropriate safeguards for the data they process.

11. Children’s privacy

DriveNest is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has used the service, contact us and we will take appropriate action.

12. Changes to this policy

We may update this policy as the service or legal requirements change. The current version is always published at https://drivenest.app/privacy with its effective date. If we make a material change to how we use Google user data, we will update this page before the change takes effect.

13. Contact

Questions about privacy, data access or deletion: support@drivenest.app