Privacy policy

Kabsa VPS Backup

Effective date: 22 September 2026

This policy describes how the private Kabsa VPS Backup utility accesses and uses Google user data. The utility is operated solely by the owner of the associated Google account and VPS.

Google data accessed

The utility requests the limited Google Drive drive.file scope. It can create, list, read, update, and delete only files and folders that the utility creates or that the account owner explicitly makes available to it. It does not request unrestricted access to the account's Drive.

Purpose of access

Google Drive access is used only to store, verify, retain, and restore the owner's encrypted restic backup repository. Google user data is not used for advertising, profiling, or training artificial-intelligence models.

Storage and security

• Backup contents and filenames are encrypted by restic on the VPS before upload.
• OAuth credentials and tokens are stored in root-only configuration on the owner's VPS.
• Data is transferred over encrypted HTTPS connections.
• This informational website uses no cookies, analytics, advertising, or third-party scripts.

The OAuth refresh token is retained in root-only VPS configuration until it is revoked or replaced. Cloudflare serves only these public informational pages and may process ordinary web-request metadata such as IP address, user agent, and request time as part of operating its network; it does not receive the Google OAuth token or backup contents from this site.

Sharing

The utility does not sell or share Google user data with third parties. Encrypted backup objects are stored only in the owner's Google Drive account and processed on the owner's VPS for backup and recovery.

Retention and deletion

Encrypted backup data is retained according to the owner's configured restic retention policy. The owner can delete the app-created backup folder in Google Drive, revoke the app's access from the Google Account permissions page, or remove the OAuth configuration from the VPS. Revoking access stops future API access but does not itself delete backup objects already stored in Drive.

Limited use

Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

For privacy questions, use the support email displayed on the Google OAuth consent screen for Kabsa VPS Backup.

Return to the application homepage · Terms of Use