Privacy Policy

Last updated: Apr 15, 2026

Information We Collect

When you use GPDoc, we collect information that you provide directly to us:

• Account information such as name, email, and profile image from your sign-in provider
• Content you create, upload, or store in GPDoc
• Usage information and diagnostics, such as feature usage, error logs, and device or browser details

Google User Data We Access

If you connect a Google account, GPDoc accesses the following Google user data to enable Google Drive, Docs, and Slides import and export:

GPDoc can be used without connecting third-party services. If you choose to enable any integrations, we access and share data with those providers only as described in this policy.

• Google Drive file metadata, including file IDs, names, types, and timestamps
• Content of Google Docs and Google Slides that you choose to import or export
• Google OAuth access and refresh tokens stored on your client so GPDoc can complete Drive requests you start

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve GPDoc
• Authenticate your account and connect third-party services
• Import content from Google Drive and export GPDoc content back to Google Docs or Slides
• Communicate with you about service updates, support, and security

Data Storage and Retention

GPDoc stores the content you create or import so you can access it later. When you connect Google, OAuth tokens are stored on the client you use, such as browser storage in the web app or secure extension storage in VS Code. Those tokens are sent to our serverless endpoints to perform the Google Drive, Google Docs, and Google Slides operations that you start. We do not intentionally store Google OAuth tokens on our servers.

You can disconnect Google at any time, which removes the locally stored tokens from your client and stops GPDoc from accessing Google data.

Information Sharing

We do not sell your personal information. We only share data in the following limited circumstances:

• With Google and other providers when you enable their integrations
• With service providers that help us operate GPDoc, such as hosting and analytics
• To comply with legal obligations or protect the rights and safety of GPDoc and its users

Data Security

Security procedures are in place to protect the confidentiality of your data, including sensitive Google user data used for Google Drive, Docs, and Slides integrations.

We use encryption to protect your information in transit and, where supported by our infrastructure providers, at rest.

• Encryption in transit using HTTPS/TLS between your device, GPDoc services, and Google APIs
• Provider-managed encryption-at-rest controls for stored data where available
• Access controls that limit production data access to authorized personnel and service accounts
• Google OAuth tokens stored on your client and removed when you disconnect Google

Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Disconnect third-party integrations such as Google

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page.

Contact Us

If you have any questions about this privacy policy, please contact us at support@gpdoc.io.