Pinehood Cloud Services Privacy Policy Effective date: [Month Day, Year] Operator: [Full legal name or operator name] Website: https://cloud.pinehood.tech Contact: support@pinehood.tech Address: [Optional business or mailing address] 1. Introduction This Privacy Policy describes how Pinehood (“Pinehood,” “we,” “us,” or “our”) collects, uses, stores, and shares information in connection with Pinehood Cloud Services. Pinehood Cloud Services is a suite of Pinehood-operated web applications, which currently includes: - ph-expense-tracker (extra.pinehood.tech) - ph-one-time-upload (otu.pinehood.tech) - ph-football-teams-manager (fto.pinehood.tech) - ph-configurable-web-scraper (cws.pinehood.tech) - ph-joip (joip.pinehood.tech) - ph-restaurant-logger (reslog.pinehood.tech) - ph-secure-image-storage (sis.pinehood.tech) - ph-membership-manager (memman.pinehood.tech) - ph-limited-time-services (lts.pinehood.tech) - ph-analytics (analytics.pinehood.tech) - ph-feature-flags (flags.pinehood.tech) This Privacy Policy applies to all current and future Pinehood Cloud Services unless a specific service provides its own separate privacy policy. 2. Information We Collect When you use Pinehood Cloud Services and sign in with Google, we may collect and receive the following information: 2.1 Information from Google Sign-In - your Google account email address - your Google account identifier provided through Google Sign-In - authentication-related token data required to verify your sign-in and maintain your session 2.2 Account and Service Information We may collect and maintain information relating to your account and use of the service, such as: - account creation date - sign-in timestamps - account status - internal account identifiers - app-specific account settings or preferences 2.3 Technical, Security, and Usage Information We may automatically collect certain technical and operational information, including: - IP address - browser type and version - device type and operating system - referrer information - timestamps - service logs - error logs - access logs - security and abuse-prevention signals - basic usage metadata necessary to operate, maintain, secure, and troubleshoot the services 3. Google Data We Do Not Request Pinehood Cloud Services uses Google Sign-In only for authentication and account access. We do not request access to: - Gmail content - Google Drive files - Google Calendar data - Google Contacts data - Google Photos - Google Classroom - or other Google account content not required for authentication 4. How We Use Information We use the information we collect to: - create and maintain your account - authenticate your sign-in - associate your Google account with your Pinehood account - provide you access to the relevant Pinehood Cloud Services application - secure the services and prevent abuse, fraud, spam, and unauthorized access - operate, maintain, monitor, debug, and improve the services - respond to support inquiries and account-related requests - comply with applicable law, regulations, legal process, and enforceable governmental requests - enforce our Terms of Use and other policies 5. Google Sign-In Data When you sign in using Google, we use your Google account email address and your Google account identifier solely for authentication, account creation, account access, account recovery support, and security-related purposes. We do not sell Google user data. We do not use Google user data for advertising purposes. We do not request Google user data beyond what is necessary to authenticate the user and manage the user’s account in Pinehood Cloud Services. 6. Legal Bases for Processing Where applicable under relevant privacy laws, we process personal data on one or more of the following bases: - your consent - performance of a contract with you - our legitimate interests in operating, securing, and improving the services - compliance with legal obligations 7. How We Share Information We may share information in the following circumstances: 7.1 Service Providers and Infrastructure Providers We may share information with third-party vendors, hosting providers, logging providers, monitoring providers, analytics providers, customer support providers, security providers, and similar service providers that process data on our behalf for business operations. 7.2 Legal and Safety Reasons We may disclose information if we believe disclosure is reasonably necessary to: - comply with applicable law, regulation, legal process, or governmental request - enforce our agreements and policies - detect, prevent, or address fraud, abuse, security, or technical issues - protect the rights, property, and safety of Pinehood, our users, or others 7.3 Business Transfers We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, dissolution, sale of company assets, or similar transaction, subject to appropriate confidentiality and legal safeguards where applicable. 8. Data Retention We retain personal data for as long as reasonably necessary to: - provide the services - maintain account records - keep security and audit logs - prevent fraud and abuse - resolve disputes - enforce agreements - comply with legal, tax, accounting, or regulatory obligations Retention periods may vary depending on the type of data and the purpose for which it was collected. When personal data is no longer reasonably necessary for these purposes, we will delete it, de-identify it, or aggregate it, unless we are required or permitted to retain it by law. 9. Account Deletion and Data Requests You may request deletion of your Pinehood Cloud Services account and associated personal data by contacting us at support@pinehood.tech. Upon a verified request, we will take reasonable steps to delete or de-identify personal data that we no longer need, subject to any lawful basis for retention, including security, fraud-prevention, backup, compliance, dispute-resolution, and recordkeeping needs. You may also manage or revoke Pinehood Cloud Services access through your Google account permissions settings, where applicable. 10. Security We use reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. However, no method of transmitting or storing information over the internet is completely secure, and we cannot guarantee absolute security. 11. International Data Processing Pinehood Cloud Services may be operated and hosted using infrastructure located in multiple countries. By using the services, you understand that your information may be processed in countries other than your own, subject to applicable legal requirements. 12. Children’s Privacy Pinehood Cloud Services is not directed to children under the age of [13 / 16 / applicable threshold], and we do not knowingly collect personal data from children in violation of applicable law. If you believe a child has provided personal data to us unlawfully, contact us at support@pinehood.tech so we can investigate and take appropriate action. 13. Your Rights Depending on your location and applicable law, you may have rights regarding your personal data, including the right to request access, correction, deletion, restriction, objection, or data portability. To exercise available rights, contact us at support@pinehood.tech. We may need to verify your identity before responding to a request. 14. Changes to This Privacy Policy We may update this Privacy Policy from time to time. When we do, we will revise the “Effective date” above. If changes are material, we may provide additional notice through the services, website, or other appropriate means. 15. Contact Information If you have questions about this Privacy Policy or our privacy practices, contact us at: Pinehood Cloud Services Email: support@pinehood.tech Address: [Optional address]