Privacy Policy
Privacy Policy
Last updated: November 2025
Drive Toolbox, a product and trade name of Clockwise Logic LLC, an Ohio Limited Liability Company, respects your privacy and is committed to protecting it through this policy.
This Privacy Policy describes how Drive Toolbox (“we,” “us,” or “our”) collects, uses, and protects your information when you use the Drive Toolbox desktop application (“App”) that connects to your Google Drive account.
1. Who We Are
Drive Toolbox is developed and owned by Clockwise Logic LLC, an Ohio-based Limited Liability Company.
Our mission is to help users manage their Google Drive files and permissions elegantly, efficiently, and privately from their own computer.
2. Information We Collect
We collect only the minimal amount of information necessary to operate and authorize the App.
a. Google Account Profile Data
When you sign in through Google OAuth, we access limited profile information provided by Google — specifically:
- Your Google account email address
- Your name, username, and display name
- Your profile picture URL (aka "avatar")
This information is used solely for display purposes in the App, and to:
- Identify you as a valid user of the App
- Authorize app usage
- Communicate important information, updates, or support notices (if you opt in)
- Generate anonymized, aggregate usage statistics (for example, the number of people who use the App)
We may securely retain this limited profile information on our servers for these purposes. Clockwise Logic LLC will never share or sell your name, username, or email address to third parties.
b. Billing and Payment Information
If you choose to purchase a paid license or subscription for Drive Toolbox, payments are processed securely through Stripe, Inc., our third-party payment provider.
- Stripe will collect and store information needed for payment processing, compliance, and fraud prevention. You can view Stripe’s Privacy Policy at https://stripe.com/privacy.
- Clockwise Logic does not collect or store any payment method details (such as credit card numbers).
- Clockwise Logic stores non-sensitive billing identifiers (for example, your Stripe customer ID and billing status) to manage your billing through Stripe, and to validate the status of your paid license or subscription.
c. User Preferences and Communications
- Drive Toolbox may store user preferences unrelated to Google Drive, such as interface settings or notification choices.
- If you opt in to receive updates or newsletters, we will store your communication preferences (for example, whether you wish to receive marketing emails).
- You can unsubscribe or change these preferences at any time from within the app or by following the unsubscribe link in any email.
- We do not sell or share this information with third parties.
3. Google Drive Data Access and Use
Drive Toolbox requests permission to access your Google Drive through the Google Drive API using OAuth 2.0 authentication.
- The App may request access to your Google Drive so you can list, download, delete, or change sharing permissions on your files.
- All such actions occur locally on your computer, directly between the App and Google’s servers.
- We do not collect, transmit, or store any of your Google Drive files or metadata on our servers.
- Drive Toolbox does not share or sell any user data with third parties.
Drive Toolbox may optionally allow you to use a third-party Large Language Model (LLM) plug-in to help generate filter syntax or search expressions. When enabled, only your prompt text (the text you type) is sent to the LLM service. No Google Drive data, file names, or metadata are ever transmitted to any LLM provider.
Your Google Drive data remains between you and Google at all times.
Note on File Sharing
Some actions you perform through Drive Toolbox — for example, changing a file’s sharing permissions — will cause Google Drive itself to share that file or your email address with the specified recipient.
This behavior is normal for the Google Drive API. When you choose to share, delete, or modify a file, the resulting changes occur in your own Drive account and are controlled by Google’s systems. You are responsible for understanding the effects of these actions.
4. Local Data Storage
Drive Toolbox stores data locally on your computer, including:
- A local SQLite database containing cached file information retrieved from Google Drive
- Short-lived JSON Web Tokens (JWTs) used to verify active sessions
- Any Google Drive files you choose to download
The App never stores access tokens. Refresh tokens are stored only on our API servers, encrypted at rest using AES-256-GCM. When needed, our API securely exchanges the refresh token with Google for a temporary access token. Locally stored tokens are session-specific and cannot be used to access your Drive data outside the App.
You can view or delete this local data at any time within the App. We do not have access to this local data, and it is never transmitted to our servers.
5. Cookies and Web Tracking
Drive Toolbox is principally a desktop application and it does not use cookies, web beacons, or any form of web tracking technology.
We do maintain a web interface to ensure that users can manage their billing (including canceling their subscription) with or without access to the desktop app. If you log into the web interface, a temporary session cookie may be set solely to keep you logged in while using the web app; it is not used for tracking or analytics.
6. Data Retention
We retain your non-sensitive Google profile data (name, username, email, avatar URL) for as long as necessary to provide the App’s services, maintain authorization records, and communicate important product information. You may contact us at any time to request deletion of this information.
Your Google Drive content or metadata is never transmitted to our servers.
7. Data Security
We use industry-standard security practices to protect the limited information we retain.
- The contents of your Google Drive are never transmitted to our servers. This includes file contents and metadata such as file names, file types, and file sizes.
- All communication between the App, our API, and Google’s servers occurs over HTTPS (TLS).
- Refresh tokens stored by our API are encrypted at rest using AES-256-GCM.
- Locally stored JWTs are short-lived and used only for session validation.
- The OAuth flow uses Proof Key for Code Exchange (PKCE) and state validation to prevent authorization code interception and CSRF attacks.
- Access tokens are generated on demand and are never stored on disk.
- Your Google Drive data is stored locally on the device you use to run the Drive Toolbox app.
- Data stored on your own device is fully under your control and not accessible to us.
Please follow best practices to secure and protect your device.
8. User Control and Data Deletion
You may revoke Drive Toolbox’s access to your Google account at any time by visiting your Google Account Permissions. You may also delete cached authentication tokens to the Drive Toolbox API and local data by logging out of the App or deleting the config and userdata folders.
If you have a paid account or newsletter subscription, you may request deletion of your billing records or communication preferences by contacting privacy@clockwiselogic.com. We will comply with such requests to the extent permitted by law and accounting regulations.
To request deletion of your retained profile data or for privacy inquiries, contact: privacy@clockwiselogic.com
9. Children’s Privacy
Drive Toolbox is not directed to individuals under 13, and we do not knowingly collect personal information from children.
10. Ownership Transfer / Business Sale
In the event that the Drive Toolbox business or Clockwise Logic LLC is sold, merged, or otherwise transferred to another entity, your limited non-sensitive Google profile information (such as name, username, email address, and avatar URL) may be transferred as part of the business assets.
Any successor or acquiring entity will be bound by the same privacy commitments described in this Privacy Policy and will use your information only to provide the App and services in the same manner as described herein. Your information will not be sold, rented, or otherwise shared for unrelated commercial purposes.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent version. Continued use of the App after updates means you accept the revised policy.
12. Contact Us
For questions pertaining to this Privacy Policy, please contact Clockwise Logic LLC via email at privacy@clockwiselogic.com.