Privacy Policy

Rarticle Software Sdn. Bhd. ("Rarticle", "we", "us", or "our") operates a Google Workspace application that connects Google Drive and Google Sheets to n8n automation workflows (the "Service"). This Privacy Policy explains what data we access, how we use it, and your rights regarding that data.

By using the Service, you agree to the practices described in this policy.

1. Information We Access

To provide the Service, we request access to the following Google account data via OAuth 2.0:

• Google Drive — to read files and form submission data stored in your Drive.
• Google Sheets — to read Google Form response data written to linked spreadsheets.

We do not access your Gmail, Google Calendar, contacts, or any other Google services beyond those listed above.

2. How We Use Your Data

Data accessed through Google APIs is used exclusively to:

• Read Google Form submission data from your connected Sheets.
• Trigger the appropriate n8n automation workflow with that submission data as the payload.

Google Limited Use Policy: Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy , including the Limited Use requirements. Specifically:

• We do not sell your Google data to any third party.
• We do not use your Google data for advertising or to build user profiles.
• We do not transfer your Google data to third parties except as necessary to provide the Service (i.e., forwarding form submission data to your n8n instance to trigger a workflow).
• We do not allow humans to read your Google data unless you have explicitly given permission, or it is required for security or legal compliance.

3. Data Storage and Retention

The Service processes Google Form submission data transiently to trigger your n8n workflow. We do not persistently store the contents of your Google Drive or Sheets on our servers beyond what is necessary to complete a single workflow trigger request.

OAuth tokens (access and refresh tokens) required to authenticate with Google on your behalf are stored securely and encrypted at rest. These tokens are retained until you revoke access or disconnect the Service from your Google account.

4. Data Sharing

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• Your n8n instance: Form submission data is forwarded to the n8n API endpoint you configure, to trigger your automation workflow.
• Legal compliance: If required by applicable law, regulation, or court order.
• Business transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

5. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. OAuth credentials are encrypted at rest and transmitted over TLS.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Revoking Access

You may revoke the Service's access to your Google account at any time via your Google Account Permissions page. Upon revocation, the Service will no longer be able to access your Drive or Sheets data.

7. Your Rights (PDPA Malaysia)

As a user based in Malaysia or whose data is processed by a Malaysian company, you have rights under the Personal Data Protection Act 2010 (PDPA), including the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Withdraw consent for the processing of your personal data.
• Request that we cease processing your personal data.

To exercise any of these rights, contact us at support@rarticle.my.

8. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the Service after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: