Data practices

Privacy notice

This notice covers Matthew Eddy's personal Teacher Workspace backup utility and these information pages.

Information used by the backup utility

The utility reads the owner's local Workspace database and private host configuration to produce a recovery snapshot. These contents may include private planning information and configuration secrets. It encrypts the snapshot with AES-256-GCM before uploading it to Google Drive.

During connection it checks the Google account email and permission identifier against the intended owner. It stores OAuth client and refresh credentials in owner-only local files to allow future backups. Drive file and folder identifiers, file sizes, hashes, timestamps, ownership and Trash status are used to verify transfers and retention. The utility requests only https://www.googleapis.com/auth/drive.file; it does not scan the owner's entire Drive.

Storage and use

Encrypted snapshots are held locally and in the dedicated unshared Google Drive folder. The encryption key is managed separately and is not included in the backup archive. A local status record reports backup progress and age without returning credentials or file paths to the dashboard.

The utility uses Google data only to connect the intended account, create and verify backups, support recovery and apply the chosen retention policy. It does not sell Google data, use it for advertising or send it to AI models for training.

Recovery and retention

Verification or restore can create temporary decrypted files in a restricted local workspace; normal completion removes those temporary files. Failed or interrupted work may require supervised cleanup. The selected automatic policy keeps active backups for at least 14 elapsed days and moves eligible older app-created, verified files to recoverable Drive Trash after a newly verified backup. It preserves the newest intact verified point and excludes legacy, unverified and unrelated files. The utility never permanently deletes files or empties Trash. Google applies its own Trash lifecycle. Activation and actual run evidence are recorded locally.

Control and disconnection

The owner can stop the local backup job and revoke the app's access through Google Account connections. Revoking access stops future authorized Drive operations; it does not remove existing backups. The owner can manage those files in Drive and remove local credential files when access is no longer needed.

These public pages

These pages contain no sign-in, forms, backup upload or analytics scripts. Cloudflare Pages processes ordinary web request metadata to deliver and protect the site. See Cloudflare's privacy policy. No Workspace contents or backup credentials are published here.

Contact

Questions or requests about this personal utility can be sent to Matthew Eddy at support@classhubpro.com. Material changes to these data practices will be reflected in this notice; any broader Google access requires fresh consent.