← NEON ATC

Privacy Policy

Effective date: 30 October 2026

This Privacy Policy describes how NEON ATC (“the app”) accesses, uses, stores, and shares Google user data. It is limited to the app’s actual Google Drive OAuth practices.

1. Operator

NEON ATC is operated privately by the application operator for the operator’s own use. It is not offered as a public consumer signup product.

2. Google data accessed

The app requests the OAuth scope https://www.googleapis.com/auth/drive.file. With that scope, the app can access only:

• Google Drive files and folders the operator opens with the app; and
• Google Drive files and folders the app creates.

The app does not request full Google Drive access, Gmail, Contacts, Calendar, or other Google product scopes.

3. How Google user data is used

Google user data obtained through this scope is used only to:

• authenticate the operator’s Google account for Drive access;
• create, upload, update, or read Drive files and folders the operator has authorised through this scope; and
• refresh short-lived access tokens so authorised Drive operations can continue without repeating consent on every run.

The app does not use Google user data for advertising, unrelated profiling, or sale to data brokers.

4. Credential and token storage

• OAuth client configuration and refresh tokens are stored only in operator-controlled protected storage outside public source control.
• Access tokens are short-lived and used to call Google Drive APIs.
• Client secrets, refresh tokens, and access tokens are not published on this website or in public repositories.

5. Retention

• OAuth tokens are retained until the operator rotates or deletes them, or until Google or the operator revokes access.
• Drive files created or uploaded by the app remain in the operator’s Google Drive under the operator’s Drive retention and sharing settings.

6. Sharing

Google processes authentication and Drive API requests as Google’s services. The operator does not sell Google user data.

Drive files may become visible to other people or tools only when the operator separately shares those files or folders in Google Drive. That sharing is controlled by the operator in Google Drive.

7. Revocation

Access may be revoked by:

• removing the app from Google Account third-party access settings; and/or
• deleting stored refresh tokens and related secrets from operator-controlled storage.

After revocation, the app cannot obtain new access tokens until the operator completes consent again.

8. Changes

If the app’s Google data practices change, this Privacy Policy will be updated on this site before those new practices are relied upon.