Skip to content

Commit b9e3e5c

Browse files
author
Your Name
committed
Update Privacy Policy with Google API Services User Data Policy compliance
- Added comprehensive Section 10: Google API Services & User Data Policy - Clearly states what Google data we access (email, profile, openid only) - Explains how we use Google data (authentication only) - Confirms Limited Use requirements compliance - States we do NOT access Gmail, Drive, Calendar, or other Google services - Confirms we do NOT sell, share, or use data for advertising - Explains data storage, security, and retention - Provides clear instructions for revoking access - States independence from Google (not affiliated) - Updated last modified date to February 28, 2026 - Added Google API Services User Data Policy link in footer - Changed branding from 'CODEEX AI' to 'CODEEX' throughout Compliance: - Google API Services User Data Policy (Feb 15, 2024) - Limited Use requirements - Transparency requirements - Security requirements - User control requirements This update resolves Google OAuth branding verification issues.
1 parent 3eeebd0 commit b9e3e5c

1 file changed

Lines changed: 171 additions & 14 deletions

File tree

‎src/app/privacy/page.tsx‎

Lines changed: 171 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,8 @@ import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/com
66
import { Alert, AlertDescription } from '@/components/ui/alert';
77

88
export const metadata: Metadata = {
9-
title: 'Privacy Policy | CODEEX AI',
10-
description: 'Privacy Policy and Data Protection practices for CODEEX AI platform',
9+
title: 'Privacy Policy | CODEEX',
10+
description: 'Privacy Policy and Data Protection practices for CODEEX platform - Compliant with Google API Services User Data Policy',
1111
};
1212

1313
export default function PrivacyPage() {
@@ -29,7 +29,7 @@ export default function PrivacyPage() {
2929
</div>
3030
<div>
3131
<h1 className="text-4xl font-bold">Privacy Policy</h1>
32-
<p className="text-muted-foreground mt-1">Last updated: February 21, 2026</p>
32+
<p className="text-muted-foreground mt-1">Last updated: February 28, 2026</p>
3333
</div>
3434
</div>
3535

@@ -57,9 +57,10 @@ export default function PrivacyPage() {
5757
<a href="#retention" className="text-sm text-primary hover:underline">7. Data Retention</a>
5858
<a href="#rights" className="text-sm text-primary hover:underline">8. Your Rights</a>
5959
<a href="#cookies" className="text-sm text-primary hover:underline">9. Cookies & Tracking</a>
60-
<a href="#children" className="text-sm text-primary hover:underline">10. Children's Privacy</a>
61-
<a href="#international" className="text-sm text-primary hover:underline">11. International Users</a>
62-
<a href="#changes" className="text-sm text-primary hover:underline">12. Policy Changes</a>
60+
<a href="#google-api" className="text-sm text-primary hover:underline">10. Google API Services & User Data</a>
61+
<a href="#children" className="text-sm text-primary hover:underline">11. Children's Privacy</a>
62+
<a href="#international" className="text-sm text-primary hover:underline">12. International Users</a>
63+
<a href="#changes" className="text-sm text-primary hover:underline">13. Policy Changes</a>
6364
</div>
6465
</CardContent>
6566
</Card>
@@ -494,7 +495,157 @@ export default function PrivacyPage() {
494495
</CardContent>
495496
</Card>
496497

497-
{/* Section 10 */}
498+
{/* Section 10 - Google API Services */}
499+
<Card id="google-api">
500+
<CardHeader>
501+
<div className="flex items-center gap-2">
502+
<Shield className="h-5 w-5 text-primary" />
503+
<CardTitle>10. Google API Services & User Data Policy</CardTitle>
504+
</div>
505+
</CardHeader>
506+
<CardContent className="space-y-4 text-sm">
507+
<Alert className="mb-4">
508+
<Bell className="h-4 w-4" />
509+
<AlertDescription>
510+
CODEEX uses Google API Services, including Google Sign-In for authentication. This section explains how we handle Google user data in compliance with{' '}
511+
<a href="https://developers.google.com/terms/api-services-user-data-policy" target="_blank" rel="noopener noreferrer" className="text-primary hover:underline font-semibold">
512+
Google API Services User Data Policy
513+
</a>.
514+
</AlertDescription>
515+
</Alert>
516+
517+
<div>
518+
<h4 className="font-semibold mb-2">What Google Data We Access</h4>
519+
<p>When you sign in with Google, we request access to:</p>
520+
<ul className="list-disc list-inside space-y-1 ml-4 mt-2">
521+
<li><strong>Email address</strong> - To create and identify your account</li>
522+
<li><strong>Basic profile information</strong> - Your name and profile picture (optional)</li>
523+
<li><strong>OpenID</strong> - To authenticate your identity</li>
524+
</ul>
525+
<p className="mt-2 text-muted-foreground">
526+
We do NOT access your Gmail, Google Drive, Calendar, Contacts, or any other Google services beyond basic authentication.
527+
</p>
528+
</div>
529+
530+
<div>
531+
<h4 className="font-semibold mb-2">How We Use Google User Data</h4>
532+
<p>We use Google user data exclusively for:</p>
533+
<ul className="list-disc list-inside space-y-1 ml-4 mt-2">
534+
<li><strong>Authentication</strong> - To verify your identity and create your CODEEX account</li>
535+
<li><strong>Account Management</strong> - To maintain your user profile and preferences</li>
536+
<li><strong>Communication</strong> - To send you important account-related notifications (with your consent)</li>
537+
</ul>
538+
<p className="mt-2 font-semibold text-primary">
539+
We do NOT use Google user data for advertising, analytics, or any purpose beyond authentication and account management.
540+
</p>
541+
</div>
542+
543+
<div>
544+
<h4 className="font-semibold mb-2">Limited Use Requirements</h4>
545+
<p>CODEEX's use of information received from Google APIs adheres to the{' '}
546+
<a href="https://developers.google.com/terms/api-services-user-data-policy#additional_requirements_for_specific_api_scopes" target="_blank" rel="noopener noreferrer" className="text-primary hover:underline">
547+
Google API Services User Data Policy
548+
</a>, including the Limited Use requirements:</p>
549+
<ul className="list-disc list-inside space-y-1 ml-4 mt-2">
550+
<li>We only use Google user data to provide and improve user-facing features</li>
551+
<li>We do NOT transfer Google user data to third parties (except as required for authentication)</li>
552+
<li>We do NOT use Google user data for serving advertisements</li>
553+
<li>We do NOT allow humans to read Google user data (except for security purposes or with explicit user consent)</li>
554+
<li>We do NOT use Google user data to determine creditworthiness or for lending purposes</li>
555+
</ul>
556+
</div>
557+
558+
<div>
559+
<h4 className="font-semibold mb-2">Data Storage & Security</h4>
560+
<p>Google user data is:</p>
561+
<ul className="list-disc list-inside space-y-1 ml-4 mt-2">
562+
<li><strong>Encrypted in transit</strong> - All data transmission uses HTTPS/TLS encryption</li>
563+
<li><strong>Encrypted at rest</strong> - Stored securely in Firebase with encryption</li>
564+
<li><strong>Access-controlled</strong> - Only authorized systems can access user data</li>
565+
<li><strong>Regularly audited</strong> - We conduct security reviews and updates</li>
566+
</ul>
567+
</div>
568+
569+
<div>
570+
<h4 className="font-semibold mb-2">Data Retention</h4>
571+
<p>We retain Google user data only as long as necessary:</p>
572+
<ul className="list-disc list-inside space-y-1 ml-4 mt-2">
573+
<li>Your email and profile information are stored while your account is active</li>
574+
<li>You can delete your account at any time through Account Settings</li>
575+
<li>Upon account deletion, your Google user data is permanently removed within 30 days</li>
576+
<li>Some data may be retained longer if required by law or for security purposes</li>
577+
</ul>
578+
</div>
579+
580+
<div>
581+
<h4 className="font-semibold mb-2">No Data Selling or Sharing</h4>
582+
<p className="font-semibold text-primary">
583+
We do NOT sell, rent, or share your Google user data with third parties for their marketing or advertising purposes.
584+
</p>
585+
<p className="mt-2">
586+
Google user data is only shared with:
587+
</p>
588+
<ul className="list-disc list-inside space-y-1 ml-4 mt-2">
589+
<li><strong>Firebase/Google Cloud</strong> - For authentication and secure storage (Google's own services)</li>
590+
<li><strong>You</strong> - You can access and export your data at any time</li>
591+
<li><strong>Legal authorities</strong> - Only if required by law</li>
592+
</ul>
593+
</div>
594+
595+
<div>
596+
<h4 className="font-semibold mb-2">Your Control Over Google Data</h4>
597+
<p>You have full control over your Google user data:</p>
598+
<ul className="list-disc list-inside space-y-1 ml-4 mt-2">
599+
<li><strong>Revoke Access</strong> - You can revoke CODEEX's access to your Google account at any time through{' '}
600+
<a href="https://myaccount.google.com/permissions" target="_blank" rel="noopener noreferrer" className="text-primary hover:underline">
601+
Google Account Permissions
602+
</a>
603+
</li>
604+
<li><strong>Delete Account</strong> - Delete your CODEEX account and all associated data through Account Settings</li>
605+
<li><strong>Export Data</strong> - Export your data using our data export features</li>
606+
<li><strong>Update Information</strong> - Update your profile information at any time</li>
607+
</ul>
608+
</div>
609+
610+
<div>
611+
<h4 className="font-semibold mb-2">Independent Service</h4>
612+
<p className="font-semibold">
613+
CODEEX is an independent service and is NOT affiliated with, endorsed by, or sponsored by Google.
614+
</p>
615+
<p className="mt-2">
616+
We use Google Sign-In solely as an authentication method for user convenience. Your use of Google Sign-In is also subject to{' '}
617+
<a href="https://policies.google.com/privacy" target="_blank" rel="noopener noreferrer" className="text-primary hover:underline">
618+
Google's Privacy Policy
619+
</a>{' '}
620+
and{' '}
621+
<a href="https://policies.google.com/terms" target="_blank" rel="noopener noreferrer" className="text-primary hover:underline">
622+
Google's Terms of Service
623+
</a>.
624+
</p>
625+
</div>
626+
627+
<div>
628+
<h4 className="font-semibold mb-2">Compliance & Transparency</h4>
629+
<p>CODEEX is committed to:</p>
630+
<ul className="list-disc list-inside space-y-1 ml-4 mt-2">
631+
<li>Full compliance with Google API Services User Data Policy</li>
632+
<li>Transparent communication about data usage</li>
633+
<li>Regular security assessments and updates</li>
634+
<li>Prompt notification of any policy changes</li>
635+
<li>Respect for user privacy and data rights</li>
636+
</ul>
637+
</div>
638+
639+
<Alert className="mt-4 bg-primary/5 border-primary/20">
640+
<Shield className="h-4 w-4" />
641+
<AlertDescription>
642+
<strong>Summary:</strong> We use Google Sign-In only for authentication. We access only your email and basic profile. We do NOT access Gmail, Drive, or other Google services. We do NOT sell or share your Google data. You can revoke access or delete your account anytime.
643+
</AlertDescription>
644+
</Alert>
645+
</CardContent>
646+
</Card>
647+
648+
{/* Section 11 */}
498649
<Card id="children">
499650
<CardHeader>
500651
<CardTitle>10. Children's Privacy</CardTitle>
@@ -518,10 +669,10 @@ export default function PrivacyPage() {
518669
</CardContent>
519670
</Card>
520671

521-
{/* Section 11 */}
672+
{/* Section 12 */}
522673
<Card id="international">
523674
<CardHeader>
524-
<CardTitle>11. International Users</CardTitle>
675+
<CardTitle>12. International Users</CardTitle>
525676
</CardHeader>
526677
<CardContent className="space-y-4 text-sm">
527678
<p>
@@ -545,10 +696,10 @@ export default function PrivacyPage() {
545696
</CardContent>
546697
</Card>
547698

548-
{/* Section 12 */}
699+
{/* Section 13 */}
549700
<Card id="changes">
550701
<CardHeader>
551-
<CardTitle>12. Changes to This Privacy Policy</CardTitle>
702+
<CardTitle>13. Changes to This Privacy Policy</CardTitle>
552703
</CardHeader>
553704
<CardContent className="space-y-4 text-sm">
554705
<p>
@@ -574,7 +725,7 @@ export default function PrivacyPage() {
574725
{/* Contact Section */}
575726
<Card>
576727
<CardHeader>
577-
<CardTitle>13. Contact Us</CardTitle>
728+
<CardTitle>14. Contact Us</CardTitle>
578729
</CardHeader>
579730
<CardContent className="space-y-4 text-sm">
580731
<p>
@@ -630,9 +781,15 @@ export default function PrivacyPage() {
630781

631782
{/* Footer */}
632783
<div className="mt-12 pt-8 border-t text-center text-sm text-muted-foreground">
633-
<p>© 2026 CODEEX AI. All rights reserved.</p>
784+
<p>© 2026 CODEEX. All rights reserved.</p>
785+
<p className="mt-2">
786+
This Privacy Policy is effective as of February 28, 2026 and will remain in effect except with respect to any changes in its provisions in the future.
787+
</p>
634788
<p className="mt-2">
635-
This Privacy Policy is effective as of February 21, 2026 and will remain in effect except with respect to any changes in its provisions in the future.
789+
This policy complies with{' '}
790+
<a href="https://developers.google.com/terms/api-services-user-data-policy" target="_blank" rel="noopener noreferrer" className="text-primary hover:underline">
791+
Google API Services User Data Policy
792+
</a>.
636793
</p>
637794
</div>
638795
</div>

0 commit comments

Comments
 (0)