Tender Workspace Privacy – Google Drive Use

Effective: 2026-09-10. Who: Artech Niaga Sdn Bhd, contact email.

What we access: Google Drive files/folders opened or created with Tender Workspace via https://www.googleapis.com/auth/drive.file only. No Gmail, no full-Drive access.

How we use it: store, read back and verify tender PDFs you upload; create per-tender subfolders under the company archive folder. OAuth refresh token is stored encrypted server-side (Cloudflare secrets) and never in the browser or repo.

Limited Use: The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Sharing: we do not sell data. Sub-processors: Google Drive (bytes), Cloudflare (hosting), Supabase (metadata). Malaysia PDPA 2010 applies; contact us to access/correct/delete.

Retention/revoke: tender files kept per project retention; revoke anytime at myaccount.google.com -> Security -> Third-party access — uploads then fail with “not connected” by design.