Privacy notice

Data controller and app operator

ONEWAY DIGITAL LTD, registered in England & Wales (Company No: 16814888), is the data controller and operator of Oneway Ops. The app is currently an internal tool in active development, preparing for a broader SaaS rollout; public registration is not yet available. Contact contact@onewayhq.com with privacy questions, or founders@onewayhq.com for application support.

Google data accessed

With the account holder's authorization, the Drive integration accesses files created by or specifically shared with the app under Google's drive.file permission. It uses listing-image files and folder metadata, including names, file and folder identifiers, file sizes and available checksums.

During connection setup, the app may read the account's email address or display name to identify the connected account. OAuth access and refresh tokens are used to maintain the authorized connection. The app does not ask for the Google account password.

This Drive permission does not grant access to Gmail messages, contacts or calendars. Any separate integration requesting other Google permissions needs its own accurate disclosure; those integrations are outside this notice.

How the data is used

The app creates store-specific image folders, uploads generated product images, checks that remote files match the intended local files, and supplies verified image references to the configured listing workflow. It may replace outdated app-managed folders, move replaced folders to Drive Trash, and remove temporary upload folders when an upload fails.

Google account information is used to identify and operate the connection. OAuth credentials are used for authentication and renewal, not for advertising or unrelated account access.

Where data is stored and shared

Application settings, OAuth credentials, local image files and operational records are stored on the owner's computer. Uploaded images and their metadata are stored in the connected Google Drive account.

For listing operations, image references and listing data are sent to the owner's configured Make workflow. That workflow retrieves the image files from Drive and uploads them to Etsy. When the owner publishes a listing, the listing images are visible on Etsy. Connecting Drive alone does not make its files public.

Google, Make and Etsy process data needed to provide their respective services under their own terms and privacy policies. OAuth credentials are not part of the listing payload sent to Make.

Retention and deletion

The app does not apply a fixed automatic deletion period to its image library or operational history. These remain until the owner removes them through the relevant storage or service. Backups and copies in third-party services must be handled separately.

Disconnecting Drive removes the app's locally saved Drive authorization and connection records. It does not automatically erase uploaded Drive files, local product images, backups, Make execution records or Etsy listings.

The account holder can also revoke access through Google Account third-party connections. Revocation stops subsequent authorized access but does not delete existing copies. For help identifying or removing retained data, contact contact@onewayhq.com.

Security

The integration uses Google OAuth, HTTPS requests to Google, and limited file permissions. Credentials are kept out of public pages and listing payloads. Access to local files depends on the security of the owner's computer and backups; this notice does not promise encryption at rest or risk-free storage.

These information pages

These pages contain no sign-in form, advertising scripts, analytics scripts or application credentials. The hosting provider may process ordinary web-request information, such as IP addresses and request logs, to deliver and protect the site.

Changes to this notice

This notice will be updated before introducing additional Google data uses or sharing practices. Its revision date appears above.