Privacy Policy

This Privacy Policy explains how RDProject / ReduceProject ("RDProject", "we", "us", or "the Service") accesses, uses, stores, shares, and deletes information when users interact with RDProject features, including integrations with Google Drive, YouTube Data API v3 / YouTube API Services, and local workflows or integrations involving Obsidian.

1. Information we may access

RDProject only requests access needed for features that a user chooses to enable. Depending on the feature and permissions approved by the user, the Service may access:

• Google account information: account identifiers and basic profile information, if the relevant Google OAuth permissions are requested and approved.
• Google Drive data: files, file contents, filenames, metadata, folder information, and permissions that are available under the Google Drive scopes granted by the user. RDProject may create, read, update, move, export, synchronize, or delete Drive content only when required by an enabled feature and permitted by the granted scope.
• YouTube data: YouTube channel information, video and playlist information, metadata, and other YouTube API Data made available by the permissions granted by the user. If a feature performs a write action, such as creating, updating, or deleting YouTube resources, that action is performed only as part of user-facing functionality and subject to the permissions granted by the user.
• Obsidian/local data: notes, files, metadata, settings, or vault content that the user explicitly makes available to an RDProject integration. Local Obsidian data may remain on the user's own device or storage unless the user chooses a feature that transfers it to another connected service.
• Technical information: limited operational information needed to authenticate requests, maintain integrations, prevent abuse, diagnose errors, and secure the Service.

2. How we use information

Information is used only to provide, maintain, secure, and improve the user-facing functionality requested by the user, including connecting services, reading or organizing selected content, synchronizing data, importing or exporting content, and performing actions the user initiates or authorizes.

RDProject does not sell Google user data or YouTube API Data. RDProject does not use Google user data or YouTube API Data for targeted advertising, advertising profiles, credit decisions, or sale to data brokers. Google Workspace data is not used to train or improve a general-purpose artificial intelligence or machine-learning model.

3. Google Drive and Google Workspace data

RDProject requests only Google permissions that are necessary for the feature the user activates. The exact permissions requested are shown on Google's authorization screen before access is granted. Google Workspace data obtained through Google APIs is used only for the user-facing purpose for which the user authorized access and is handled in accordance with the Google API Services User Data Policy and applicable Google Workspace developer requirements.

Transfers of Google Workspace data are limited to cases allowed by Google's Limited Use requirements, such as providing the requested feature with user consent, security purposes, legal requirements, or another transfer explicitly permitted by Google policy. Human access to Google Workspace user data is restricted except where the user gives explicit permission for specific data, where access is required for security, or where required by law.

4. YouTube API Services

RDProject uses YouTube API Services. By using RDProject features that interact with YouTube, users also interact with services provided by Google/YouTube. Users should review the YouTube Terms of Service and the Google Privacy Policy.

Where RDProject stores or caches YouTube API Data, it retains that data only as necessary for the authorized feature and refreshes or deletes stored API Data within the time limits required by YouTube policies. When required by YouTube policy, cached API Data is refreshed or deleted within 30 days.

5. OAuth tokens and security

OAuth access and refresh tokens are used only to maintain an authorized connection to the services selected by the user. RDProject is designed to protect credentials and user data using reasonable technical and organizational safeguards. Where credentials or Google user data are stored by RDProject systems, they must be protected against unauthorized access and transmitted using secure protocols such as HTTPS.

No Internet service can guarantee absolute security. Users should protect their own accounts and devices and revoke access if they believe an authorization is no longer safe.

6. Data sharing

RDProject does not sell or rent personal data. Data may be transmitted to Google, YouTube, or another service selected by the user when this is necessary to perform the feature requested by the user. Data may also be disclosed when required by law or when reasonably necessary to protect the Service, users, or others from security threats, fraud, or abuse.

If RDProject relies on infrastructure or service providers to operate the Service, they may process only the minimum data necessary to provide their service and only under appropriate confidentiality and security restrictions.

7. Data retention and deletion

RDProject keeps personal data only for as long as necessary to provide the requested functionality, maintain security, comply with applicable law, or resolve legitimate disputes. Local Obsidian data remains under the user's control when it is stored only in the user's local environment.

Users may disconnect Google access at any time through Google's account permissions page:

Google Account — third-party access and permissions

After authorization is revoked, RDProject will stop using the revoked authorization. YouTube Authorized Data stored under that authorization will be deleted as soon as possible and, where YouTube policy applies, within 7 calendar days. Users may also request deletion of data controlled by RDProject using the contact channels published on the RDProject homepage.

Deleting data stored by RDProject does not automatically delete content stored on Google Drive or YouTube. To delete data from those services, users must use the relevant Google/YouTube interface or an authorized application feature that performs that deletion.

8. User choices and controls

• Users choose whether to grant Google OAuth permissions.
• Users can refuse a permission; related features may then be unavailable.
• Users can revoke Google access through their Google Account security settings.
• Users can remove or disconnect local Obsidian integrations and control which local files are made available.
• Users can request access, correction, or deletion of personal data controlled by RDProject where applicable law provides those rights.

9. Cookies and local storage

RDProject may use cookies, browser storage, or similar technologies only where needed for authentication, security, preferences, or core functionality. RDProject does not use Google user data or YouTube API Data to build advertising profiles.

10. Children

The Service is not intended to knowingly collect personal information from children where doing so would violate applicable law or Google/YouTube policies. Users must meet the age and account requirements of the third-party services they connect to RDProject.

11. Third-party services

Google Drive, YouTube, Obsidian, and other connected services operate under their own terms and privacy practices. References to third-party products or trademarks do not by themselves imply sponsorship, endorsement, or affiliation.

12. Changes to this policy

We may update this Privacy Policy when RDProject features, legal requirements, or third-party API requirements change. If a change materially expands how Google user data is accessed or used, RDProject will update the disclosure and obtain any additional consent required before using the data for the new purpose.

13. Contact

For privacy questions, complaints, or data-deletion requests, contact RDProject through the contact/support channels published on the official homepage at https://rdproject.net/.