Scope
This policy covers the private MathAnalysisAI Offsite Backup tool used by the project maintainer. It does not describe the separate MathAnalysisAI learning application, which has its own operational data handling.
Data handled
Backup sets may contain the production SQL Server database, user-uploaded business files, and necessary disaster-recovery material. Those contents may include personal data. Restic encrypts backup data on the server before it is sent to Google Drive. Encryption reduces exposure of stored backup contents but does not remove the maintainer’s privacy, security, or legal responsibilities.
Google Drive and access scope
rclone uses the Google Drive API to create, read, and maintain backup repository files. The configured OAuth scope is drive.file, which is a per-file permission model for files created by or opened/shared with the application. It does not impose a folder-only boundary. Google processes account and API metadata needed to provide Drive. The proxy operator may observe network connection metadata; backup payloads are encrypted by Restic before upload.
Credentials
OAuth configuration and tokens are stored in a protected, maintainer-controlled configuration file on the Ubuntu host. The Restic password is stored separately with restricted file permissions, and an independent recovery copy is kept outside that host. Credentials are not intended to be shared with students or the public.
Retention and deletion
The configured retention policy is designed to keep 7 daily, 4 weekly, and 3 monthly snapshots. At the time this policy was reviewed, scheduled backup and retention timers were not enabled. Therefore, this is a configured policy target, not a guarantee that snapshots are currently created or deleted on that schedule. The maintainer may delete repository data as part of maintenance or account revocation; deletion from a backup repository may affect recovery. No fixed deletion deadline is promised.
Sharing
The backup tool is not designed to share backup contents with third parties. Google provides the storage service and processes data under its own terms. Access by infrastructure or network operators may expose service metadata. No claim is made that the backup repository contains no personal data.
Revoking access
The maintainer can revoke the application’s Google account access from the Google Account security settings and disconnect or remove the rclone OAuth configuration on the host. Revocation prevents future access but does not itself erase files already stored in Drive; repository deletion must be handled separately.
Contact
For questions about this backup tool’s privacy, contact nightcreek438@gmail.com. This address should be confirmed by the maintainer before the site is made public.
Changes
This policy should be updated when the backup contents, OAuth scope, credential storage, retention behavior, or service providers change.