Privacy Policy
1. Who we are
Techoria is operated by an individual developer (contact: nvnhan.dev@gmail.com). Besides the public exam-study sites, Techoria includes private administration tools that only the operator can sign in to. Those tools connect to the operator's own Google account through Google OAuth.
2. Google user data we access
The private tools request the following Google OAuth scopes, always on the operator's own account and only for the purposes below:
- Google Drive (
auth/drive,auth/drive.readonly) — list, read and upload the operator's own files, for example to store generated audio/video files and to read source files that the operator selects. - YouTube (
auth/youtube) — upload videos to the operator's own channel (privately by default) and manage that channel's playlists. - Gmail, send only (
auth/gmail.send) and email address (auth/userinfo.email) — send short notification emails (for example "your video job finished or failed") from the operator's account. The app cannot read, search or delete any email.
3. How we use and store it
- Google data is used only to provide the features above to the operator. It is not used for advertising, profiling, or to train machine-learning models.
- OAuth refresh tokens are stored encrypted (AES-256-GCM) in the application's database on a private server; access tokens are kept only in memory for about one hour.
- Files from Google Drive are processed on the server only while a requested job runs and are deleted afterwards or when the operator removes the project.
- We do not sell, rent or share Google user data with third parties. We do not allow humans to read Google user data except with the operator's own action, to comply with law, or for security/abuse investigation.
- Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Other data
The public study sites and tools may keep standard web-server logs (IP address, user agent, requested path and time) for security and abuse prevention, and the operator's tools keep job records (titles, status and result links). Sessions use cookies that are needed to sign in; no advertising trackers are used.
5. Retention, deletion and revoking access
The operator can disconnect any Google service in the admin dashboard, which deletes the stored token and revokes it with Google. You can also revoke access at any time at myaccount.google.com/permissions. To ask about or request deletion of data related to you, email nvnhan.dev@gmail.com.
6. Changes
If this policy changes, the new version will be posted on this page with an updated date.