AVDHUB
BillSplit Backups Privacy Policy
Google Drive access and encrypted backup handling.
Effective October 29, 2026. Operator: Ashok Muppavarapu. Contact: [email protected].
Purpose and Google access
BillSplit Backups is a personal recovery tool for the operator’s BillSplit installation. The operator authorizes Google Drive through Google’s OAuth consent flow. Rclone stores access and refresh credentials in a restricted configuration file on the Oracle server to support unattended backups.
The Google Drive permission is drive.file. The tool creates, uploads, lists, downloads and deletes only files and folders available to this Google application, including its dedicated backup folder. It does not request Gmail, Contacts or Calendar access or use Google data for advertising.
Data stored and use
Backups contain BillSplit database records, including users, group participants, expenses, repayment records, audit history and uploaded bills or receipt files. Nonsecret deployment templates and recovery metadata are also included. Filled environment files, the Google client secret, tunnel tokens and the Rclone configuration are excluded from uploaded archives.
Archives and filenames are encrypted with Rclone Crypt on the server before upload. Downloads are decrypted on the server to verify checksums and test restoration in an isolated container. Temporary plaintext staging files are removed after each run; staging data may remain after an abrupt host shutdown and must then be reviewed by the operator.
Storage and service providers
The live data and backup processing are on an Oracle-hosted server. Encrypted backup objects are stored in the operator’s Google Drive. Oracle, Google and Cloudflare provide their respective infrastructure and may process service metadata. The tool does not sell Google user data, use it to train AI models, or intentionally share backup contents with advertisers or unrelated parties.
Retention and deletion
The scheduled job retains all verified snapshots for seven days, then the newest verified snapshot per calendar week up to 28 days. Unverified or interrupted uploads are retained for operator review. Provider trash, account retention or existing manual copies may retain deleted objects longer.
The operator can pause the backup timer, revoke this application in Google Account permissions, and delete backup objects from Drive and its trash. Revoking authorization prevents future access but does not itself delete existing backups. Deleting a live record does not immediately remove it from retained recovery snapshots.
Security and control
The operator safeguards the encryption passwords separately. Losing them can make backups unrecoverable. Access is limited to the operator’s authorized accounts and server administrators. Encryption and restore checks reduce risk but do not guarantee uninterrupted backups or prevent every loss.
Contact and changes
For questions, deletion assistance or changes to Google authorization, contact [email protected]. Material changes will be reflected here with an updated effective date.