Privacy Policy
Effective date: August 3, 2025 · Last updated: October 4, 2026
Drive Organizer Pro is a web application that helps you browse, select, rename, move,
upload, and clean up files in Google Drive™ from your browser. This policy describes how we handle your information.
What we access
- Google Drive metadata: file and folder names, types, sizes, modified dates, checksums when available, parent folders, owners, and sharing access (who a file is shared with or by) when you open item details, so we can display your Drive tree and perform actions you request.
- Files you upload: when you choose Upload or drop files onto a folder, those file bytes go from your browser to Google Drive. We do not store the uploaded files on our servers.
- Your Google account email: to sign you in, keep your session, and verify Pro subscription status if you subscribe.
We do not read the contents of your documents, spreadsheets, or other file bodies unless you upload a file, or Google’s API requires it to complete a rename, move, or trash action you initiate.
How we use your information
- Drive operations run in your browser. Requests go directly from the web app to Google’s APIs over HTTPS.
- We store your email with a server-side sign-in session (encrypted Google refresh token) so we can keep you signed in. If you subscribe to Pro, we also store your email with plan and billing status. We do not store your Drive file list or file contents on our servers.
- We do not sell, rent, or share your personal data with advertisers or data brokers.
Data storage & retention
- Drive data: Processed in your browser session; not persisted on Drive Organizer Pro servers.
- Sign-in sessions: For every Google sign-in, Firebase stores your email with an encrypted refresh token in a server-only collection (
oauthSessions). Clients cannot read that collection. Sessions are deleted on sign-out or expiration.
- Pro billing: If you subscribe, Firebase stores your email, plan, and Stripe customer/subscription IDs in
users/{email}. Free users typically have no billing document until they upgrade.
- Published folder templates: If you publish a template, the folder names, title, summary, and tags you submit are stored in Firestore and shown publicly in the catalog. Do not publish real student or client names. You can make a template private so it leaves the catalog without deleting it, or remove it from My Templates. Likes can be stored with a browser token so anyone can like a template from the templates page. If you like while signed in, we store your Google email with the template id so that account can like once. Templates do not store Drive file IDs or file contents.
- OAuth access tokens: Short-lived access tokens stay in the browser session. The browser holds only an opaque refresh handle, not the Google refresh token.
Security
- All communication with Google APIs uses HTTPS (TLS).
- We request the minimum OAuth scopes needed for the features you use.
- For Google restricted Drive access, the app completed an independent App Defense Alliance CASA AL1 assessment with TAC Security, an authorized lab. That is a security assessment of how the app handles Google user data. It is not a Google product certification.
- You can revoke access anytime at Google Account permissions.
Google API Services User Data Policy
Drive Organizer Pro’s use of information received from Google APIs adheres to the
Google API Services User Data Policy,
including the Limited Use requirements.
Cookies & analytics
- Marketing site: Optional Google Analytics (GA4) and TikTok Pixel after you Accept: page visits, button clicks to open the app or pricing, campaign tags (UTMs), and TikTok ad measurement. Reject keeps those tags off.
- Web app (/app): Same GA4 property may record that you opened the app, signed in, started checkout, or used a feature (for example move, sort, copy folder, or a scan). Those events are names and coarse buckets only. They are not tied to your email in Analytics and never include Drive file names, paths, or contents. Sign-in sessions and (if you subscribe) Pro billing records are stored in Firebase as described above. Card details stay with Stripe.
- What we do not collect: Drive file names, folder paths, file contents, duplicate/health/sharing scan results, or how much space you could reclaim. Health, duplicate, and sharing scans run in your browser only and are not uploaded to our servers or analytics.
- TikTok Pixel is an advertising measurement cookie on the marketing site only, and only after Accept. We do not put it on /app/. We do not sell Drive data.
Children
Drive Organizer Pro is not directed at children under 13.
Changes
We may update this policy. The effective date at the top will change when we do.
Contact
Questions: support@driveorganizerpro.com
Google Drive™ is a trademark of Google LLC.
← Back to home