Privacy Policy

This Privacy Policy describes how The Americas Consulting Company ("we", "us", or "our") handles information in connection with our internal server backup application ("the Application"). The Application uses the Google Drive API solely to store encrypted backup archives on a private Google Drive account controlled by the organization.

1. Scope

This policy applies to the Application's use of the Google Drive API. It does not apply to the main TACC website, our client-facing services, or any other applications we operate.

2. What the Application Does

The Application is an internal automated backup tool that:

• Creates encrypted archives of server configuration files and databases.
• Uploads those encrypted archives to a private Google Drive folder.
• Deletes old archives from Google Drive when the retention limit is reached.

The Application does not serve end users, collect personal data from third parties, or process any information other than the server-generated backup files it uploads.

3. Google Drive API Usage

The Application accesses Google Drive using OAuth 2.0 credentials authorized by the account owner. The access is used exclusively to:

• Upload encrypted backup files to a designated folder.
• List and delete files in that folder for rotation purposes.

We do not read, modify, or access any files outside the designated backup folder. No Google Drive data is shared with third parties.

4. Data Collected

The Application does not collect personal data from any individual. The backup archives it uploads contain server infrastructure data (configuration files, database dumps) that is encrypted with AES-256 before leaving the server. Google cannot read the contents of these archives.

5. Data Retention

Backup archives are retained on Google Drive for a rolling period defined by the organization's backup policy (currently 14 archives). Older archives are automatically deleted when new ones are created beyond this limit.

6. Third-Party Services

The Application interacts with Google Drive via the Google API. Google's own privacy practices are governed by the Google Privacy Policy.

7. Security

All backup archives are encrypted with AES-256 symmetric encryption before upload. The encryption passphrase is stored only on the originating server and is never transmitted to Google or any third party.

8. Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page reflects the date of the most recent revision.

9. Contact

For questions about this Privacy Policy, contact us at:
hello@theamericasconsulting.com
The Americas Consulting Company — Montevideo, Uruguay