Privacy Policy and Terms of Use

1. Data controller and contact

Controller: Christoph Scheyer, Camp Itara, Melekeduri, Georgia.

Privacy inquiries: welcome@itara.ge.

2. Data collected

When you visit our website, our hosting infrastructure may process IP addresses, browser details, access timestamps and requested pages to deliver and protect the service. If you use our contact form, we process the name, email address, phone number and message you choose to provide in order to respond.

Authorized ITARA OS users have accounts with login credentials, access roles and operational records. Public visitors do not need to connect a Google account.

3. Google Drive access and Google user data

An authorized administrator may voluntarily connect a Google account through OAuth 2.0. ITARA OS requests https://www.googleapis.com/auth/drive.file, allowing access to files created by or explicitly opened with the application, rather than general access to all private Drive files.

Google provides temporary access tokens and, if granted, a refresh token. ITARA OS stores the refresh token encrypted in protected application settings to maintain the authorized connection. We do not ask for or store your Google password.

ITARA OS creates full database backups, which may contain personal data from its operational modules, and uploads them to a dedicated folder in the authorized Google Drive account. The Google Drive permission is used to create, list, verify and delete these backup files. During these operations the application processes Google Drive file identifiers, names, creation timestamps, file sizes and checksums for application-managed backup files. The application does not request access to Gmail, Contacts or Google Photos. Google user data is not used for advertising, profiling or training general-purpose AI models. ITARA OS uses Google API information only to provide the administrator-requested backup functionality. The use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

4. Purposes and legal grounds

Data is used to deliver and secure the website, answer inquiries, provide authorized internal operations and maintain recoverable backups. Depending on applicable law and context, processing may rely on legitimate interests, contractual necessity, legal obligations or consent. Google account access is initiated and authorized by the administrator.

5. Storage, sharing and security

The service uses hosted server infrastructure. Authorized backups are transferred over HTTPS to the administrator's Google Drive account. Access to backup administration is limited to ITARA OS administrators; Google refresh tokens are stored encrypted. We do not intentionally publish backup files or sell Google user data. Google API data is not disclosed to independent third parties except the Google Drive service used for the authorized backup operation, infrastructure processors needed to run the service, or where required by law. No human access to Google Drive contents is part of the normal automated backup process. Data is shared with hosting and storage providers only as necessary to provide these services or meet legal requirements.

6. Retention and deletion

Database backups are scheduled approximately every 24 hours. After a successful upload and integrity check, the application retains the five most recent backups in its designated folder and deletes older application-managed backups. If an upload fails, the existing backups are not intentionally pruned.

Contact messages are retained while needed to handle the inquiry and applicable obligations. Server logs and other operational records are retained according to operational security needs and applicable requirements; no fixed deletion interval is currently configured or represented here.

You may revoke Google access via Google Account third-party connections. Revoking access stops future authorized access but does not automatically erase existing backup files. You can delete backup files in Google Drive and request removal of stored authorization data through welcome@itara.ge.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection or portability of your personal information. Contact welcome@itara.ge for privacy requests.

8. Terms of use

Public website content is provided for information and contact. ITARA OS administration is restricted to authorized users who must respect assigned permissions. Availability and functionality may change during development. Mandatory statutory rights remain unaffected.

9. Changes

We may update this policy when our processing activities, Google API permissions or service providers change. Material changes to Google user data access, use, storage or sharing will be announced in the ITARA OS administration interface and reflected on this public policy before the changed processing is activated. Where necessary, we will request renewed Google authorization.