Privacy & security

Privacy Policy

Effective date: November 6, 2026 · Applies only to the Arni Production Backup Google Drive connector, not the ARNI student platform as a whole.

Purpose and authorized user

This connector is used by a designated Arni platform operator to transfer encrypted backup archives from the platform's hosting environment to an operator-authorized Google Drive account. It is not accessible as a service to students, guardians, or teachers, and it does not request Google access from them.

Google account data and permissions

After the operator consents, the connector uses the Google Drive API and the https://www.googleapis.com/auth/drive.file permission. It may create, list, upload, read back for integrity verification, and delete backup files and folders that the connector creates or has been explicitly granted access to. It uses file identifiers and transfer metadata only as needed for those operations. The connector does not request general access to unrelated files in the Google account.

What is stored

The intended backup sources are Arni production database exports and private-media archives. Such source archives may contain personal information, including information relating to minors. The workflow is designed to encrypt archive content locally on the hosting server using age before any transfer to Google Drive. Google Drive stores ciphertext archives, rather than plaintext backup archives, when this workflow is correctly configured.

OAuth access tokens and configuration are held in the authorized server's operational configuration and are not displayed by this website. The age decryption private key is intended to be held separately from Google Drive and the production host. Encryption keys and recovery credentials must not be published or included in the archives.

Use, sharing, and retention

Google Drive is the storage destination and processes data in accordance with Google's applicable terms and privacy notices. The connector is not designed to sell data, serve advertisements, or use data for profiling. The operator controls backup access, retention, recovery, and deletion. A daily schedule and a 14-day rolling retention period are proposed operational settings; the actual policy applies only once configured and tested. Older archives may remain until the operator's deletion process runs.

Security and choices

Transfers use Google API authentication and HTTPS. The account owner can revoke this connector's access from Google Account security settings. Revoking access prevents future transfers but does not automatically delete encrypted archives already stored in Drive. To request information or deletion of archives under the operator's control, contact the operator below. Restoration and deletion are subject to legitimate data-preservation obligations and approved operational procedures.

Website data

These static informational pages do not include forms, advertising pixels, or application analytics scripts. The hosting provider may process ordinary web request logs, including IP addresses, for delivery and security.

Contact and policy changes

For questions about this connector or its data practices, contact [email protected]. Material changes to these practices will be reflected in an updated policy before those changes are introduced.

This document is intended as a transparent description of the limited backup connector; it does not replace the student platform's own privacy notices or institutional approvals.