EFFECTIVE 16 SEPTEMBER 2026

Privacy Policy

This policy explains how SpecNest handles personal information. SpecNest is designed so that your engineering record stays in a Google Sheet in your own Google Drive. Optional product analytics is separate, content-free, and off until you allow it.

Who is responsible

The SpecNest operator is responsible for the limited account, service, and analytics processing described here. Privacy questions and requests may be sent to specnest.tool@gmail.com. You control the engineering information in your Google Drive and the people with whom you share it.

Information SpecNest handles

• Google identity and session: after you choose Google sign-in, the app reads your Google account identifier, name, and email address in your browser to identify the local session. A short-lived Google access token is kept in browser session storage. SpecNest does not receive your Google password.
• Engineering records: projects, systems, parts, requirements, parameters, tests, decisions, approvals, notes, audit entries, and revision snapshots that you enter. The browser sends this information directly to Google APIs for storage in your Drive; SpecNest does not maintain a server-side copy.
• Optional analytics: only after you allow analytics, SpecNest stores a random browser identifier, a random session identifier, the time, consent version, and a short allowlist of events such as session started, workbook connected, project created, record type created, or Drive save failure. It does not send names, email addresses, Google account IDs, access tokens, spreadsheet IDs, project names, record text, or engineering content.
• Operational information: hosting and security providers may process ordinary request, device, error, IP-address, and security logs needed to deliver and protect the service.
• Support information: information you choose to include when contacting SpecNest.

Purposes and legal grounds

Google identity, session information, and engineering records are processed to provide the workspace you request, perform the agreement with you, secure the service, and comply with legal obligations. Optional analytics is processed only with your consent to understand adoption, diagnose product failures, and improve SpecNest. Operational security logs are processed as necessary to operate and protect the service and, where applicable, for SpecNest's legitimate interests. You may refuse optional analytics without losing any product feature.

Analytics choices and deletion

Optional analytics is off by default. Choose Allow analytics to enable it, or Essential only to decline. The Privacy choices control remains available on every page. Turning analytics off removes its browser identifiers; choosing Turn off and delete my analytics also asks SpecNest to delete raw events associated with that browser identifier. Global Privacy Control is treated as analytics off when no choice has already been saved.

Because the identifier is random and is not linked to your Google identity, SpecNest may be unable to locate the same browser's events after the identifier has been cleared. You may contact us before clearing it if you need assistance with a privacy request.

Google Drive and Google API data

SpecNest requests the drive.file permission so it can create, find, read, update, and delete only files created with or opened through SpecNest. Google data is used only to provide and support the user-facing workspace and is not used for advertising, optional analytics, or training general-purpose AI models. SpecNest's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google's handling of your account and Drive is governed by Google's own policies.

Sharing and service providers

SpecNest does not sell personal information, share it for cross-context behavioural advertising, or use it for targeted advertising. Information may be processed by Google at your direction; by website hosting, database, security, and support providers acting for SpecNest; during a business transaction subject to appropriate safeguards; or when disclosure is legally required or reasonably necessary to protect users and the service. Optional analytics is first-party and is not sent to an advertising or third-party analytics platform.

Retention

• Engineering records remain in your Google Drive until you delete them.
• The Google access token remains in browser session storage until the browser session ends or you sign out. Local sign-in information remains until you sign out, delete the workspace, or clear site data.
• Raw optional analytics events are automatically removed after 13 months and may be deleted sooner through Privacy choices. Aggregated statistics that no longer identify a browser may be retained.
• Operational security logs and support records are kept only for provider, security, dispute, and legal retention periods reasonably required for those purposes.

International processing and security

SpecNest and its providers may process information in countries other than yours. Where required, transfers rely on applicable contractual or legal safeguards. SpecNest limits Google permissions, uses HTTPS, separates analytics from project content, restricts the owner dashboard, and minimizes stored fields. No online service can guarantee absolute security.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information; withdraw consent; and complain to a privacy or data-protection authority. Consent withdrawal does not affect processing already carried out lawfully. You can directly view, edit, export, and delete engineering records in Google Drive. Email specnest.tool@gmail.com to exercise rights that apply to you; reasonable identity verification may be required.

Children

SpecNest is intended for adults and is not directed to anyone under 18. We do not knowingly collect children's personal information. A parent or guardian who believes a child has provided information should contact us for deletion.

Changes

Material changes will be posted with a new effective date and, when required, additional notice or renewed consent. A new purpose for Google user data will not be used without the disclosure and consent required by Google policy and applicable law.