Data practices

Privacy policy

This policy describes how the owner-operated Maness Creative Backups utility handles Google Drive access and business backup data. It is separate from the main website’s visitor inquiry policy.

Effective date: November 13, 2026. The production retention schedule below is approved as a plan but is not yet active.

Operator and contact

The utility is operated by Kyle Maness Creative and Digital, a Texas sole proprietorship owned by Kyle Maness. For privacy questions or requests, email kylemaness.creative@gmail.com.

Google account access

The utility connects only to a Google account authorized by the operator. The existing Google Drive drive.file permission allows the app to work only with files it creates or files the account holder specifically authorizes for use with it, rather than all Drive files. In the current Rclone backup workflow, the app uses that permission to create, find, read, update, and delete the encrypted backup files and folders it creates in the authorized account.

The utility uses this access only to store encrypted backup repository objects, check backup integrity, and retrieve objects for authorized recovery. It does not use Google user data for advertising, profiling, or sale.

Backup contents and storage

The source data is held on the business’s DigitalOcean server. A local working snapshot can contain the website database, including inquiry records, and selected owner-access files. The prepared production backup script is designed to remove its working snapshot when the run exits. Backup software encrypts the repository before its objects are sent to Google Drive. Google Drive stores the encrypted objects and file metadata needed to operate the repository; the backup encryption password is held separately from Drive.

Authorized operators may access source data and restore backup data when needed to maintain or recover the website. Google provides storage for the encrypted repository. DigitalOcean hosts the source system. Service providers may process technical information needed to provide those services. The utility does not intentionally send plaintext website records to Google Drive.

Credentials and safeguards

Google authorization credentials and the backup encryption password are kept in protected server files with restricted access, separately from these public information pages.

Retention, deletion, and requests

Approved production plan, not yet operational: the separate production backup repository is planned to retain seven daily, four weekly, and three monthly encrypted restore points. Older restore points will be expired and unused repository data pruned after successful maintenance. This is a restore-point schedule, not a promise that every backup copy disappears within 90 days. A failed backup or maintenance run may delay cleanup. Existing staging backups remain under their separate current configuration; this production schedule is not presented as their current policy.

Rclone normally moves deleted Google Drive objects to Trash, where Google may retain them for up to 30 additional days. Removing a live inquiry does not immediately remove it from existing encrypted restore points; those copies remain until the restore points containing them expire and their unused data is pruned. If an older backup is restored, approved corrections and deletions must be reapplied before the restored site is made available.

To ask about backup data or request correction or deletion of an inquiry record, email kylemaness.creative@gmail.com. Before acting or disclosing a record, the operator will verify control of the email address already associated with the inquiry or review alternative evidence. The operator will review the request against the live record and any applicable preservation obligations. There is no public self-service inquiry deletion feature. Disconnecting Google access stops future Drive operations by this utility; it does not by itself erase backup objects already stored in Drive.

Visitors to this information site

These pages are static and include no contact form or configured analytics. The hosting provider may process standard connection data to deliver the pages. Emailing the operator supplies the information in your message and email address so the operator can respond.

Changes

The operator will update this policy when backup practices change and identify the effective date of the updated version.