Personal TathyaERP project · Internal backup utility

Open TathyaERP

TathyaERP Encrypted Backups

Privacy notice · 4 November 2026

This notice describes the Google Drive integration used by the internal TathyaERP backup utility operated by the project owner (innovationstathya@gmail.com). This utility is for authorized operators; it is not a public file-sharing or sign-in service.

Google access and its purpose

The utility requests the Google Drive drive.file permission to create encrypted backup files, download those files for integrity and recovery checks, and read the metadata needed to manage those files. This permission applies to specific files used with this app. The utility does not request access to the operator’s entire Drive, Gmail, contacts or calendar.

What is stored

Database, audit and configuration archives are encrypted on the operator’s machine using authenticated AES-256-GCM encryption before upload. Archives may contain ERP business and identity records when that coverage is expressly enabled by the operator. Drive stores the encrypted archives and a checksum file for their encrypted contents. File names, sizes and timestamps are visible to Google and the authorized Drive account.

OAuth credentials and the backup decryption key are kept in private operator configuration. The decryption key is not uploaded with the backup files. A separate, securely held key copy is necessary for recovery. Operational receipts record verification results and checksums; they must not contain passwords, tokens, recovery codes or decrypted business records.

Use and sharing

Google access is used to operate and verify the ERP backup and recovery process. The operator does not use the Google data accessed by this utility for advertising, resale or training generalized AI models. The utility does not publish backups or enable public link sharing. Authorized operators control access to the Drive account and backup destination. Google processes stored files under its own applicable terms and privacy policy.

Retention and access revocation

Operators manage retention and deletion of backup files. Revoking the app in Google Account connections stops future access under that grant; it does not itself delete files already stored in Drive. An authorized operator can remove those files through Drive. Removing encrypted archives or losing the decryption key can make recovery impossible. Backup availability and uninterrupted service are not guaranteed.

Contact and changes

For questions about this utility or its stored backup files, contact innovationstathya@gmail.com. This notice should be reviewed when the utility’s scopes, data use or retention practices change.