codebox is a private, single-user tool. Its only user is its owner, signed in with their own Google account.
codebox requests only the drive.file scope. It can see and change only the files and folders it has created itself in the owner's Google Drive. It cannot read any other files.
It uploads invoice documents (PDF, XML) produced by the owner into those folders. The only data it reads back from Google Drive are the names and checksums of its own files, to avoid duplicate uploads.
No Google user data is sold, shared with or transferred to any third party, and none is used for advertising or for training AI models. The access token is stored only on the owner's private server, readable by the owner only.
Access can be revoked at any time at myaccount.google.com/permissions.
Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.