Google Privacy Policy

Introduction

Filed ("we," "our," or "us") provides tax preparation automation software for accounting firms. As part of our service, we offer integration with Google Drive to help users import tax documents. This privacy policy specifically addresses our use of Google API Services and complies with the Google API Services User Data Policy, including the Limited Use requirements.

Data Accessed

When you connect your Google Drive account to Filed, we request access to Google Drive API services. We use the following Google API scopes:

Specifically, we access the following types of Google user data:

• Folder structure: The folders within a parent folder you specifically select
• File metadata: File names, IDs, MIME types, file sizes, and modification dates
• File content: The actual content of files you choose to import (typically PDF tax documents)
• File creation: The ability to create and write processed documents back to your selected Google Drive folder

We only access data from folders you explicitly select through the Google Picker interface. We do not scan or access your entire Google Drive. When writing documents back, we only create files in the folder you have selected for the integration.

Data Usage

Filed uses, processes, and handles your Google Drive data solely for the following purposes:

• Document Import: To import tax-related documents (W-2s, 1099s, etc.) from your Google Drive into Filed for tax preparation processing
• Folder Organization: To display folder structures so you can select which folders contain client tax documents
• File Display: To show file names and metadata so you can identify and select documents to import
• Document Export: To write processed tax documents back to your selected Google Drive folder after processing is complete

Data Storage

We store the following data when you connect your Google Drive:

• OAuth Tokens: Access and refresh tokens are stored securely and encrypted to maintain your connection
• Connection Settings: The folder ID and name you selected for importing documents
• Imported Files: Documents you choose to import are stored in Filed's secure infrastructure for tax preparation processing

All data is stored on secure, encrypted servers. We implement industry-standard security measures to protect your data, including encryption at rest and in transit.

Data Retention

Our data retention policy for Google-sourced data is as follows:

• OAuth Tokens: Retained while your Google Drive connection is active. Deleted when you disconnect your account.
• Imported Documents: Retained until you choose to delete them or close your Filed account.
• File Metadata: Not permanently stored; only used during active browsing sessions.

You have full control over your data and can delete imported documents at any time through the Filed application.

Data Sharing

We do not share your Google Drive data with third parties.

Specifically:

• We do not sell, rent, or lease your Google user data to any third party
• We do not use your Google user data for advertising purposes
• We do not share your Google user data with data brokers or information resellers
• Your imported documents remain within Filed's secure systems and are only accessible to authorized users in your organization

Your Rights and Controls

You have the following rights regarding your Google data:

• Disconnect: You can disconnect your Google Drive integration at any time from your Filed workspace settings. This will revoke Filed's access to your Google Drive.
• Revoke Access: You can also revoke Filed's access directly from your Google Account permissions page.
• Delete Data: You can delete any imported documents from Filed at any time.
• Account Deletion: If you close your Filed account, all associated data including Google-sourced data will be permanently deleted.

Security Measures

We implement comprehensive security measures to protect your data:

• Encryption of data in transit (TLS 1.2+)
• Encryption of data at rest (AES-256)
• Secure token storage with encryption
• Regular security audits and penetration testing
• Access controls and authentication requirements
• SOC 2 Type II compliance

Contact Us

If you have questions about this privacy policy or how we handle your Google data, please contact us: