Privacy policy

Last updated: November 11, 2026

This policy describes EFD Analytics Backups, a private backup connection operated by Elizabeth Fontecchio Design, LLC for its owners. It applies to the backup connection, not to unrelated Pixieset services or the public photography website.

Setup status

The Google authorization and local recovery-key setup have been completed by the owner. The daily backup service is not yet active. The practices below describe how it is configured to operate after successful testing and activation.

Google information and permissions

The connection requests Google Drive’s drive.file permission: access to files and folders created by or explicitly granted to this connection. It checks the authorized Google account’s email address to confirm the approved backup owner.

It creates or uses a dedicated, owner-only EFD Analytics Backups folder; uploads encrypted backup files; downloads those files to verify uploads and support recovery; reads their metadata; and moves eligible expired or superseded backups to Drive Trash. It does not request unrestricted access to Google Drive or permission to read Gmail, Google Photos or unrelated documents.

Backup contents and purpose

Database exports may contain customer names or identifiers, completed-session entries, revenue and tax amounts, package history, business settings and audit records entered in EFD Business Analytics. They do not include photographs. The sole purpose is business-data backup, integrity verification and recovery.

Storage and security

Live records are stored in the business’s private Cloudflare database. When activated, the backup job will temporarily process an SQL export on a GitHub Actions runner, encrypt it with OpenPGP, and upload only the encrypted copy to the authorized owner’s Google Drive.

Google OAuth credentials and the Cloudflare backup credential are kept in GitHub’s encrypted environment-secret settings. The backup encryption public key is configuration; the private recovery key and its passphrase remain under the owner’s control and are not uploaded to GitHub or the backup folder. The downloaded OAuth client configuration also remains on the owner’s setup computer unless the owner removes it.

The job is designed not to publish raw exports or credentials in source code, workflow logs or downloadable workflow artifacts. Temporary encryption files are removed after use. Cloudflare, Google and GitHub process information as service providers under their respective terms and privacy policies. Security measures reduce risk but cannot guarantee that information can never be accessed improperly.

Retention and deletion

The planned job runs daily and retains the current UTC date and the preceding twenty-nine dates. It verifies a new encrypted upload before moving older eligible copies or superseded same-day copies to Drive Trash. Retention applies only to this connection’s verified backup files for the configured database in its dedicated folder; unrelated files are excluded.

Drive Trash can retain files for another thirty days under Google’s policies, and users may empty it sooner. Failed jobs may leave older or incomplete encrypted copies that require review. Cloudflare’s separate database-recovery history follows the retention available on the business’s plan.

Use and disclosure

Google user data and backup contents are not sold, used for advertising, used to train general-purpose AI models, or shared with unrelated parties. Access is for the authorized business owners and the service providers needed to operate the backup and recovery process.

EFD Analytics Backups’ use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access or requesting deletion

The owner can revoke the connection through their Google Account’s third-party connections settings and disable the GitHub backup workflow. Revocation stops future authorized Drive operations but does not automatically delete existing encrypted backups. The owner can delete those files and empty Drive Trash directly. Contact the address below for help with backup information or deletion requests. Customer record corrections and deletion are handled by the business owners in the private analytics application.

Contact and changes

Contact zfontecchio@gmail.com with questions about this connection or its data practices. This page will be updated when the backup process or practices change.