Privacy Policy

1. Overview

Cognee Backup is a personal backup utility that uses Restic and Rclone to store encrypted backup repositories in a user-authorized Google Drive account. This Privacy Policy explains how Google user data is accessed, used, and protected.

2. Google API Scopes Requested

This application requests only the following Google Drive OAuth 2.0 scope:

• https://www.googleapis.com/auth/drive.file — Grants access strictly to specific files and folders created or opened by Cognee Backup. It does not grant access to other files stored in your Google Drive.

3. Data Processing & Client-Side Encryption

• Pre-Upload Encryption: All backup files and metadata are encrypted locally by Restic prior to upload. Only encrypted repository objects are transmitted to Google Drive via Rclone.
• Credential Storage: OAuth 2.0 configuration and refresh tokens are stored exclusively on the user's self-managed server. No credentials or backup contents are transmitted to any external third-party service.
• No Analytics or Tracking: This website and application use zero third-party scripts, cookies, trackers, or analytics services.

4. Data Sharing & Sale

Cognee Backup does not sell, rent, trade, or share Google user data or backup data with any third parties. Google user data is used solely to perform authorized backup and restore operations between the user's self-managed server and Google Drive.

5. Revoking Access & Data Deletion

You retain full ownership and control over your Google Drive data and authorization:

• Revoke Authorization: You may revoke Cognee Backup's access to your Google account at any time via your Google Account Permissions page.
• Delete Credentials & Backups: Local OAuth tokens can be removed directly from the self-managed server configuration, and encrypted backup folders in Google Drive can be deleted at any time through the Google Drive interface.

6. Contact

For questions regarding this Privacy Policy, please contact: [YOUR_EMAIL_ADDRESS]