Thank you for using Rose Arch Education. This privacy policy explains how we collect, use, store, share, and protect your information when you use our services, including information accessed through Google API Services.
Google OAuth 2.0 Authentication
Information Collected:
When you choose to connect your Google account to Rose Arch Education, we use Google OAuth 2.0 for authentication and authorisation. During this process, we may receive basic information associated with your Google account, including:
- Your Google email address
- Basic profile information, such as your name and profile picture
- Your Google account identifier
Purpose of Google Account Information:
We use this information to authenticate you, identify your account, maintain the security of our services, and provide functionality associated with your Rose Arch Education account.
Google Drive Access
Rose Arch Education integrates with Google Drive to allow users to access and work with files stored in their Google Drive from within the Rose Arch Education platform.
Depending on the Google Drive functionality you choose to use, Rose Arch Education may request permission to access information from your Google Drive, including:
- Files and folders stored in your Google Drive
- File names, file types, folder information, and other file metadata
- The contents of Google Drive files where access is required to provide functionality requested by you
- Application-specific configuration data stored within Google Drive
Google Drive Permissions:
Rose Arch Education may request permission to see and download files from your Google Drive. This permission allows our application to locate and access files required for Google Drive functionality available within Rose Arch Education.
We only access Google Drive data where it is necessary to provide functionality that you choose to use within Rose Arch Education. Google Drive data is not accessed for advertising, marketing, or unrelated purposes.
How We Use Google User Data
Information obtained from Google APIs is used solely to provide and improve user-facing functionality within Rose Arch Education. This includes authenticating users and providing functionality that allows users to access and work with their Google Drive files from within our services.
We do not use Google user data for advertising, targeted advertising, marketing profiles, credit assessment, or any purpose unrelated to providing Rose Arch Education's user-facing functionality.
We do not sell Google user data.
Storage and Retention of Google User Data
Google user data is retained only for as long as is reasonably necessary to provide the functionality requested by the user, maintain the user's account, or where retention is required to meet applicable legal, regulatory, or security obligations.
Where Google Drive data is processed temporarily to provide a requested feature, we do not retain that data for longer than is necessary to provide that feature.
Sharing of Google User Data
Rose Arch Education does not sell, rent, or transfer Google user data to advertising platforms, data brokers, or other third parties for their own purposes.
Google user data may only be shared where necessary to provide, maintain, or secure our services, where you have explicitly requested or consented to the sharing, or where disclosure is required by applicable law.
Human Access to Google User Data
Rose Arch Education personnel do not access the contents of your Google Drive files except where you have provided explicit consent, where access is necessary for security or abuse investigation, or where access is required by applicable law.
Security Measures
We implement appropriate technical and organisational security measures designed to protect personal information and Google user data from unauthorised access, disclosure, alteration, loss, or destruction.
Revoking Google Access
You can revoke Rose Arch Education's access to your Google account at any time through your Google Account's third-party connections and permissions settings.
Once access has been revoked, Rose Arch Education will no longer be able to request new information from your Google account unless you subsequently reconnect your Google account.
Deletion of Google User Data
You may request deletion of your Rose Arch Education account and associated personal information, including Google user data retained by Rose Arch Education, by contacting us at annabel.lewis@thinkingmatters.com.
Revoking Google access prevents Rose Arch Education from making future requests for information from your Google account. Revoking access does not automatically delete information that has previously been stored by Rose Arch Education where retention of that information remains necessary or is otherwise permitted or required by law.
Google API Services User Data Policy
Rose Arch Education's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
User Rights
You may have rights in relation to your personal information under applicable data protection laws. These may include the right to access, correct, or request deletion of personal information that we hold about you.
For assistance exercising these rights, or if you have questions regarding information obtained through Google APIs, please contact us at annabel.lewis@thinkingmatters.com.
Updates to This Privacy Policy
We may update this privacy policy from time to time to reflect changes to our services, legal requirements, or how we use Google API Services. The latest version will be published on our website, and we encourage you to review it periodically.
Contact Us
If you have any questions about this privacy policy, our privacy practices, or our use of Google user data, please contact us at annabel.lewis@thinkingmatters.com.
Rose Arch Holdings Ltd and Thinking Matters