Privacy policy

Last updated: 20 October 2026

Hestia Governed Intake is an owner-operated workflow. This policy describes its use of Google Drive data. For questions or a request about retained data, contact ask_the@sonar.team.

Data accessed

With the account owner's consent, the app requests the Google Drive drive.metadata.readonly scope. That scope can provide metadata across the account. The workflow restricts its enumeration to the approved Hestia intake location identified in its controlled configuration. It may process file IDs, names, parent IDs, file types, creation and modification times, revisions, sizes, checksums and links. It does not request Google Drive file contents.

Use and records

Metadata is used to identify and reconcile governed intake objects with the Master Asset Register, detect changes and exceptions, and keep an audit trail of the decisions and checks performed. Object identities and relevant metadata may be retained in restricted operational ledgers and private audit records for that purpose.

Access and sharing

Operational records are intended for the account owner and authorised Hestia operators. The app does not sell Google Drive data or use it for advertising. This public website contains no Google Drive account data and runs no app analytics script.

Retention and control

Operational records are retained while needed for governed reconciliation and audit. The account owner can revoke the app's Google access in Google Account settings. To ask about access to or deletion of retained records, email ask_the@sonar.team.