Google API Disclosure

Arvora.AI is an all-in-one AI platform operated by Shrexaa Technologies Private Limited. We offer Google Sign-In as an authentication option to allow users to create and access their Arvora.AI accounts conveniently and securely using their existing Google credentials.

This disclosure page is specifically designed to provide transparency about our use of Google APIs and to satisfy the requirements of Google's OAuth verification process. It supplements our full Privacy Policy.

We integrate Google Sign-In (OAuth 2.0) for the following reasons:

• Convenience: Users can sign in with their existing Google account without creating a separate password for Arvora.AI.
• Security: Google's authentication infrastructure provides robust security including two-factor authentication support.
• Reduced friction: Eliminates the need for email verification flows during account creation.
• Trust: Users can rely on Google's identity verification rather than creating credentials on a new platform.

Google Sign-In is used only for authentication purposes. We do not use it to access any other Google services unless you explicitly grant additional permissions for a specific feature that requires it.

When you choose to sign in with Google, we receive only the following information from Google as part of the standard OpenID Connect / OAuth 2.0 authentication flow:

We request only the minimum OAuth scopes necessary: openid, email, and profile.

Google user data received through OAuth is used exclusively for the following purposes:

• Creating your Arvora.AI account upon first sign-in
• Authenticating your identity on subsequent sign-ins
• Displaying your name and profile picture within the Arvora.AI platform
• Sending account-related communications to your email address
• Providing customer support when you contact us

All uses of Google data are directly related to providing you with the Arvora.AI service you have requested.

We do not request access to, and therefore do not collect, any of the following Google data:

• ✕Gmail messages or email content
• ✕Google Drive files or documents
• ✕Google Calendar events
• ✕Google Contacts
• ✕Google Photos
• ✕YouTube data
• ✕Google Search history
• ✕Google Maps data
• ✕Any other Google service data beyond the basic profile scopes

If a future feature requires additional Google permissions, we will explicitly request your consent at the time of that feature's use and clearly explain why the permission is needed.

We strictly adhere to the following prohibitions regarding Google user data:

Google user data is not shared with third parties except in the following limited circumstances:

• Infrastructure providers: Cloud hosting and database providers who store your data on our behalf, under strict confidentiality and data processing agreements.
• Legal requirements: When required by applicable law, court order, or governmental authority.

All third-party service providers who may have access to Google user data are bound by confidentiality obligations and are prohibited from using the data for any purpose other than providing services to Arvora.AI.

We implement robust security measures to protect Google user data:

• All data is transmitted over encrypted HTTPS/TLS connections
• Google OAuth tokens are stored securely and never exposed in client-side code or logs
• Access to user data is restricted to authorized personnel on a need-to-know basis
• Regular security audits and penetration testing are conducted
• We follow OWASP security best practices in our application development
• Incident response procedures are in place to address any data breaches promptly

Google user data (email, name, profile picture URL, and Google user ID) is retained for as long as your Arvora.AI account is active. Specifically:

• Active accounts: Data is retained for the duration of the account.
• Deleted accounts: Data is deleted within 90 days of account deletion, except where retention is required by law.
• Revoked Google access: If you revoke Google's permission for Arvora.AI, your account data remains but you will need to use an alternative sign-in method. You may request full account deletion separately.

You have full control over Arvora.AI's access to your Google account:

Revoking Google Access

You can revoke Arvora.AI's access to your Google account at any time by visiting:

Effect of Revoking Access

• Revoking access will sign you out of Arvora.AI on all devices.
• Your Arvora.AI account and data will remain intact.
• You can continue to use Arvora.AI by signing in with your email and password (if set) or by re-authorizing Google Sign-In.

Deleting Your Account

To permanently delete your Arvora.AI account and all associated data, contact us at info@arvora.ai. Account deletion is processed within 30 days.

Arvora.AI's use of data obtained through Google APIs strictly complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

This disclosure is provided in accordance with Google's OAuth verification requirements. For questions about our Google API usage, please contact us at info@arvora.ai.

For questions about this Google API Disclosure or our data practices, please contact: