---
document: privacy-google
updated: 2026-10-14
---
Google user data
This page is part of the CoralDoc privacy policy. It describes what CoralDoc does with information from your Google account: signing in, and a Google Drive folder used as a space. A space is a set of pages kept in one place. Account information, other connected places, and the rest of the policy are on the privacy page.
The same description applies to CoralDoc Cloud at app.coraldoc.com and to a copy of CoralDoc you run yourself. If you run your own server, people using it should rely on the privacy policy you publish for it.
Google sign-in
Sign in with Google is separate from connecting Google Drive. It asks for the email address and name on your Google account, and whether Google has confirmed the email. We use that to sign you in or to create a CoralDoc account. Sign-in requires a confirmed email address. It does not ask for your Drive files.
Google Drive
A person allowed to manage the organization may connect one folder in their My Drive and use that folder as a space. Pages, comments, attachments, and older versions are files in that folder. CoralDoc reads and changes them when someone allowed to opens, edits, or searches the space.
Connecting Drive shows Google's own permission screen. The permission you approve can cover more of your Drive than one folder. You then pick one folder. We use the permission so you can choose that folder, and then to read and write inside it, including files CoralDoc creates there. We do not offer a way to browse, copy, or change the rest of your Drive. Shared drives cannot be connected.
We keep that permission so the space keeps working for other people in the organization. They sign in to CoralDoc only. They do not receive the Google permission. What they can see follows what they are allowed to do in CoralDoc.
We may keep a temporary copy of a page so it opens faster, usually for up to 30 days. Your Drive folder remains the source of the files.
If someone uses AI Writer on a page, the text they submit can be sent to the AI service the organization has chosen. We send it only for the request they start. We do not send Drive files to an AI service on their own.
Deleting the space removes our copy of that access. It does not delete the folder in Drive, and it does not by itself remove CoralDoc from your Google account. You can remove that access from your Google Account permissions. If Google rejects the access or it expires, the space stays unavailable until someone allowed to change it connects Google again.
Limited use of Google user data
CoralDoc's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Google user data is used only to provide and improve user-facing features in CoralDoc, such as signing in, connecting a folder, and reading, writing, searching, and organizing the pages in that space.
- We do not sell Google user data. We do not use it for advertising, retargeting, or credit decisions, and we do not transfer it to advertising platforms or data brokers.
- We share it only to run those features: with people in your organization as they are allowed, with the companies that host the CoralDoc service you are using, and with an AI service when a person sends page text to AI Writer. We may also share it if the law requires it, to investigate abuse or protect the service, or as part of a merger or sale of the service after notice where the law requires notice.
- People who operate CoralDoc do not read Google user data unless you ask us to look at a specific problem, we need to for security, the law requires it, or the data is aggregated and no longer identifies you.
Use of Google user data is limited to the practices described in this policy.
How long we keep it
We keep the Drive permission while that space is connected, and remove our copy when the space is deleted. Account information and access to other places follow the privacy policy.
Temporary copies of pages are kept for a limited time, usually up to 30 days. Logs may name the connected Google account. They do not include the stored Drive permission.
Security
We protect the Drive permission we store. Connect a Google account only if you are allowed to share that account's Drive files with the organization. The permission can reach more than the folder you picked, so anyone who obtained it could read and change other files in that My Drive.
Contact
Questions about Google user data, or a request to delete waitlist or account data: privacy@coraldoc.com.