Google API Services User Data Policy
Updated October 2026
Scope of this policy
This supplementary policy applies specifically when a tenant connects a Google account to Adrixis META through one of our Google Workspace integrations (currently: Google Sheets). It is the authoritative disclosure for Google user data accessed through Google Workspace APIs. Our general privacy policy applies to all other data.
Google user data we access
With your explicit OAuth consent, Adrixis META accesses: (1) your Google account identifier, email and basic profile (scopes: openid, email, profile) solely to display the connected account inside the Portal's Integrations panel; (2) spreadsheets you explicitly pick via the Google Picker (scope: https://www.googleapis.com/auth/drive.file). We do not browse your Drive, enumerate other files, or read any content outside the sheets you pick.
How we use Google user data
Sheet content is used only to execute the specific integration action the operator configures: reading a cell range to answer a chatbot query, appending a row when a WhatsApp form is submitted or a conversation is logged, and updating cells to sync status back from Adrixis. Profile data is only shown in the Portal to identify the connected account. We do not use Google user data for advertising, cross-tenant analytics, profiling, or any purpose outside the configured integration action.
With whom we share Google user data
Google user data is processed within Adrixis META's infrastructure, which runs on Google Cloud Platform (Firestore for storage, Cloud Run for compute). Adrixis META uses AI/ML services elsewhere in the product (image generation for template headers, chatbot routing on end-customer WhatsApp input, template-copy drafting from operator prompts) but Google Workspace user data is kept strictly isolated from every one of those AI/ML pipelines. Google Sheets integration actions are also deliberately NOT exposed to the chatbot subsystem in code — the integration spec blocks that binding. We do not sell, lease, transfer or disclose Google user data to any third-party advertising network, data broker, analytics vendor or AI/ML service, and we do not use it outside the scope of the integration action the operator explicitly configured.
Data protection
OAuth refresh tokens are encrypted at rest with AES-256-GCM in Firestore. All API traffic uses TLS 1.2 or higher. Access to tokens is scoped to the tenant's own portal session and to server-side integration workers; cross-tenant access is prevented by Firestore security rules and tenant-ID path isolation. Every outbound API call is logged with timestamp, action key, target range and the tenant that initiated it.
Data retention and deletion
OAuth refresh tokens are retained for as long as the integration remains connected. Disconnecting the integration from the Portal (Integrations → Google Sheets → Disconnect) immediately deletes the stored token and revokes our server-side access. Sheet content fetched during an action is not persisted — only operational metadata (which action ran, when, with what range, and its outcome) is retained for 90 days for audit purposes, then permanently deleted. You can also request immediate deletion of all data at any time via [email protected] or through the self-serve data-deletion page at /privacy/data-deletion.
Limited Use affirmative statement
Adrixis META's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google Workspace user data is not used to develop, improve, or train generalized or foundational AI/ML models — ours or any third party's. Google Workspace user data is not transferred to any AI/ML service for inference, training, routing, personalization or any other purpose. Where Adrixis META does use AI/ML services (image generation, chatbot routing on end-customer WhatsApp input, template-copy drafting from operator prompts), those pipelines operate on data that is explicitly NOT Google Workspace user data, and the integration spec enforces this isolation in code.
Contact and revocation
You can revoke our access to your Google account at any time, either by disconnecting the integration from the Portal (Integrations → Google Sheets → Disconnect) or by removing Adrixis META from your Google account at myaccount.google.com/permissions. For any question or request related to Google user data, contact [email protected].