Privacy Policy

This Privacy Policy explains how Softnova Digital (“Softnova”, “we”, “us”) handles information in Softnova Document Management (the “Application”), available at https://docs.softnova.in.

The Application is a private, internal business tool. It is used by Softnova and people we authorize to organize projects and business documents such as proposals, quotations, invoices, and receipts. It is not offered to the general public, and accounts are created only by an administrator.

This policy covers only the Application. Third-party services it relies on, such as Google and Supabase, have their own privacy policies.

Account details. Your email address and the authentication details needed to sign you in. If you sign in with Google, we receive basic profile information from Google (such as your name, email address, and profile picture) as part of that sign-in.

Project and document information. Information entered when creating projects and documents, which may include: project names; document type, number, and date; client or company name; amounts, tax, and totals; “received from” details and notes; file name and file size; upload status; and which user created a record and when.

Uploaded PDF files. The PDF documents you upload. These may contain whatever information is in the original document, including details about clients or other third parties.

Authentication and technical information. Session cookies that keep you signed in, and the Google authorization tokens used for the Google Drive connection (see section 5). Our hosting and infrastructure providers may also automatically record technical information in server logs, such as IP addresses, request times, and error details.

We use the information described above only to operate the Application, namely to:

• sign users in and control access to the Application;
• create and organize projects, folders, and document records;
• assign document numbers and keep document records consistent;
• store, display, preview, download, and delete uploaded PDF files;
• reduce the file size of uploaded PDFs where possible before storing them;
• diagnose errors and keep the Application working and secure.

We do not use this information for advertising, marketing profiles, or resale.

The Application uses Supabase for user authentication and as its database. Account details, project and document information, and the Google Drive authorization tokens are stored in Supabase.

Access to the database is controlled through Supabase’s access rules. Google Drive authorization tokens are stored in a table that only the Application’s server can read; they are never sent to your browser.

Uploaded PDF files are stored in Google Drive, not in the Application’s database. To make this work, an authorized user connects a Google account to the Application using Google’s OAuth authorization screen.

What access is requested. The Application requests the Google Drive permission https://www.googleapis.com/auth/drive, which Google describes as access to see, edit, create, and delete files in that account’s Google Drive. The Application uses this access only within the designated “Softnova Documents” Drive folder and the project folders inside it.

What the Application does with it. Using this access, the Application:

• creates, renames, and deletes project and document-type folders;
• uploads PDF files into those folders;
• retrieves files and Google-generated preview thumbnails so authorized users can view and download them in the Application;
• deletes files when a document is deleted in the Application. Files deleted this way are removed permanently and do not go to the Google Drive bin.

How Google data is handled. Google Drive files and data are accessed only by the Application’s server and only to provide these document management features to authorized users. We do not sell Google user data, do not use it for advertising, and do not use it to develop, improve, or train generalized artificial intelligence or machine learning models. People do not read Google user data except when the account owner asks us to (for example, for support), when needed for security purposes or to comply with law, or when the data has been aggregated and anonymized for internal operations.

Softnova’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting. The Google account owner can revoke the Application’s access at any time from their Google Account’s security settings (“Third-party apps & services”). After that, the Application can no longer read or change files in Google Drive. Files already stored in Google Drive stay there under the account owner’s control.

We do not sell personal information, and we do not share Google user data for advertising.

We share information only with service providers we need to operate the Application:

• Supabase: authentication and database;
• Google: Google sign-in and Google Drive file storage;
• Our hosting provider: running the Application’s servers, which process requests and uploaded files in transit.

We may also disclose information if required by law, or to protect the rights, safety, or security of Softnova, our users, or others.

We keep account, project, and document information for as long as it is needed to operate the Application and to meet Softnova’s business, accounting, and legal record-keeping needs.

• Deleting a document in the Application removes its database record and permanently deletes its PDF from Google Drive.
• Empty folders and empty projects can be deleted, which also removes the corresponding Google Drive folder.
• Temporary copies of a PDF made while it is being processed for upload are removed once processing finishes.
• Server logs kept by our infrastructure providers are retained according to those providers’ own policies.

To request deletion of your account or other information, contact us at softnovadigital@gmail.com.

We take reasonable steps to protect information, including:

• requiring sign-in to access the Application’s projects and documents;
• serving the Application over encrypted (HTTPS) connections;
• performing all Google Drive operations on the server, so Drive authorization tokens are never exposed to your browser;
• restricting database access through Supabase’s access rules.

No method of storing or transmitting information is completely secure, and we cannot guarantee absolute security. Please keep your sign-in details confidential, and tell us promptly at softnovadigital@gmail.com if you think your account has been compromised.

Depending on applicable law, you may have the right to ask for access to, correction of, or deletion of personal information we hold about you, or to withdraw a consent you gave.

To make a request, email softnovadigital@gmail.com. We may need to verify your identity before acting on a request. Some information may need to be kept where the law or legitimate business record-keeping requires it, and we will tell you if that applies.

The Application uses only cookies needed for it to work:

• Authentication cookies set by Supabase to keep you signed in. These are removed when you log out or the session expires.
• A short-lived security cookie (valid for about 10 minutes) used while connecting Google Drive to protect the authorization process against forged requests.

The Application does not use advertising or third-party analytics cookies.

We may update this policy from time to time, for example when the Application changes. The “Last updated” date at the top shows when it was last revised. If we make significant changes, we will take reasonable steps to let users know.

Questions or requests about this policy or your information can be sent to:

Softnova Digital
Email: softnovadigital@gmail.com
Application: https://docs.softnova.in

See also our Terms of Service.