Privacy Policy — LeoPos

1) Scope

This Privacy Policy describes how LeoPos (Desktop/Tauri and Android) processes data, including the Google Drive backup feature.

2) Data processed

• In-app business data (e.g., sales records, customer information, products/services, settings) only for backup creation.
• Google OAuth data required to connect to Google Drive (authorization code / access token).
• The Google Drive folder you select (folder id and, if available, name).

3) How Google Drive backup works

• Desktop (Tauri): The app opens your system browser and uses Google OAuth 2.0. After authorization, the app can upload backup files to your Google Drive.
• Android: The app uses the platform’s file access mechanisms to save backup files into the Google Drive folder you choose.

4) Where data is stored

• Backup files are stored in your own Google Drive account, in the folder you selected.
• On Desktop, the refresh token (used to maintain the Google Drive connection) is stored in the operating system’s secure keychain (Windows Credential Manager / macOS Keychain / Linux Secret Service).
• LeoPos does not require storing your tokens on its own servers for Desktop Google Drive backup (serverless/local flow).

5) Purpose of processing

• Create backup files and upload them to Google Drive.
• Delete old backups according to the retention period you configure.
• Apply your backup settings and display errors to you.

6) Sharing

LeoPos does not share backup contents with third parties. For Google Drive integration, data is transmitted only to Google services.

7) Retention

• Retention of backup files depends on the “retention days” setting you choose.
• You can disconnect Google Drive at any time, which removes the stored authorization data from your device.

8) Security

• On Desktop, refresh tokens are stored in the OS secure storage.
• Communication with Google uses TLS/HTTPS.

9) User controls

• Disconnect Google Drive from within the app.
• Delete backup files from your Google Drive.
• Revoke permissions in your Google Account security settings (third party access).

10) Contact

• Company/Business: [Company name]
• Email: [support@yourdomain.com]
• Website: https://[yourdomain.com]
• Address: [address]