Privacy Policy for Google-Connected Apps

1. Scope of this policy

This Privacy Policy applies to Google-connected applications, integrations, automations, and related services developed or operated by Fractured Light Studios (“FLS,” “we,” “us,” or “our”). It applies when you sign in with Google or authorize an FLS application to access Google services through Google APIs.

The Google authorization screen identifies the particular permissions an application requests. If a product-specific notice conflicts with this policy, the notice that gives you greater privacy protection will apply.

2. Google user data we access

The information we access depends on the FLS application, the feature you choose, and the permissions you grant. We may access:

• Basic account information, such as your name, email address, profile image, and Google account identifier, when needed for sign-in or account management.
• Google Workspace data you explicitly authorize, such as selected files or records from Google Drive, Docs, Sheets, Gmail, or Calendar, only when required for the application feature you request.
• Technical and activity information, such as authentication events, application actions, error logs, browser or device information, and timestamps, for security, support, and reliable operation.

We request the minimum permissions reasonably necessary for the relevant feature. You can review the exact scopes requested on Google’s consent screen before granting access.

3. How we use Google user data

We use Google user data only to:

• authenticate you and connect your Google Account;
• provide the feature or workflow you requested, such as reading, creating, organizing, or updating authorized content;
• maintain application functionality, troubleshoot errors, prevent abuse, and protect users;
• respond to support requests and comply with applicable legal obligations; and
• improve the user-facing feature when the data is aggregated or de-identified, or when you have given any additional consent required by law or Google policy.

Google API Services User Data Policy

FLS’s use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Advertising and AI model training

We do not use Google user data for targeted advertising, advertising profiles, creditworthiness, lending, or surveillance. We do not use Google user data to train generalized or non-personalized artificial intelligence or machine-learning models.

4. How we share information

We do not sell, rent, or trade Google user data. We may disclose limited information only:

• to service providers that process data on our behalf to host, secure, support, or operate the application, subject to contractual confidentiality and data-protection obligations;
• when you direct us to share information or expressly consent to the disclosure;
• when reasonably necessary to comply with law, legal process, or valid government requests, or to protect rights, safety, and security; or
• as part of a merger, acquisition, financing, or sale of assets, subject to notice and continued protection of your information.

Human access to Google user data is restricted unless it is necessary for security or support, required by law, or you have provided explicit permission for the specific access.

5. Storage and security

We may temporarily or persistently store Google user data, including authorization tokens, when needed to provide the connected feature. We apply reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction.

No online service can guarantee absolute security. If we become aware of a data incident that affects your rights, we will provide notice where required by applicable law.

6. Data retention and deletion

We keep Google user data only for as long as necessary to provide the requested service, maintain security, resolve disputes, or meet legal obligations. Retention periods may vary by application and data type.

When you disconnect your Google Account or request deletion, we will delete or de-identify associated Google user data and revoke or delete stored authorization tokens, except where retention is legally required. Backup copies may remain for a limited period before being securely overwritten through routine backup cycles.

To request deletion, email hi@fls.ae with the subject “Google User Data Deletion Request.” We may need to verify your identity before completing the request.

7. Your choices and controls

You may choose not to connect a Google Account, although Google-connected features may then be unavailable. You may withdraw access at any time through your Google Account connections.

Depending on applicable law, you may also have rights to access, correct, delete, restrict, or receive a copy of your personal information, and to object to or withdraw consent for certain processing. Contact us to exercise these rights.

8. Children’s privacy

Our Google-connected applications are not directed to children under 13, and we do not knowingly collect personal information from children under 13 through these services. If you believe a child has provided personal information, please contact us so we can take appropriate action.

9. International data transfers

FLS is based in the United Arab Emirates. Our service providers may process information in other countries. Where required, we use appropriate safeguards for international transfers and handle information in accordance with this policy and applicable law.

10. Changes to this policy

We may update this policy to reflect changes to our applications, data practices, or legal obligations. We will post the revised policy on this page and update the effective date. If a change materially affects how we use Google user data, we will provide additional notice where required.