Privacy Policy

iCSRA Conversational AI

This Privacy Policy describes how the iCSRA Conversational AI application (the "Application"), developed by Ipsos, collects, uses, stores, and handles your Google user data.

1. Data Accessed

To provide conversational AI and data analysis features, the Application requests authorization to access specific Google user data. The Application only accesses data that you explicitly grant it permission to read. The specific data accessed includes:

• Google Drive Files: The Application can read the contents of specific files (such as Google Sheets, Google Docs, PDFs, CSVs, and text files) only when you actively select them using the Google Drive File Picker within the Application interface.
• User Email Address: The Application accesses your Google account email address to verify your identity and authorize your session within our corporate environment.

2. Data Usage

The Application uses the accessed Google user data strictly to provide the core functionality of the tool:

• File Processing: When you select a file, the Application temporarily extracts its text, tables, and structural formatting.
• AI Analysis: The extracted file data, along with the chat prompts you type into the interface, are bundled and sent securely to the Google Gemini API (Generative Language API) to generate analytical responses, summaries, and answers based on your documents.
• Auditing: Your email address and the text of the questions you ask the AI are recorded in our secure internal Google Cloud logs for troubleshooting, debugging, and internal usage auditing.

3. Data Sharing and Limited Use Disclosure

The Application does not share, sell, or distribute your Google user data to any external third-party companies, advertisers, or data brokers. Because the Application is built entirely on Google Apps Script and utilizes the Google Gemini API, the data you select remains securely within the Google Cloud ecosystem.

Google API Limited Use Disclosure: The iCSRA Conversational AI Application's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In accordance with Ipsos’ agreement with Google, any data submitted to Gemini through this API will not be used to train Google models.

4. Data Storage & Protection

The Application is designed to minimize data storage and maximize security:

• No External Databases: The Application does not maintain a separate, external database of your Drive files. It operates as a stateless pass-through tool built on Google Apps Script.
• Encryption in Transit: All data extracted from your Google Drive and sent to the Gemini AI models is encrypted in transit using industry-standard HTTPS/TLS protocols.
• Session-Based Memory: Your active chat history is stored strictly in your browser's volatile memory. Once you refresh the page or close the tab, the chat context is immediately destroyed.

5. Data Retention & Deletion

We adhere to strict data retention limits to protect your privacy:

• Uploaded Files (48-Hour Deletion): Files and text sent to the Google Gemini API for AI analysis are temporarily cached for inference purposes only. As per Google's API policies, these temporary files are automatically and permanently deleted after a maximum of 48 hours. The API does not allow the raw files to be downloaded or extracted by our team.
• Log Retention: Internal system logs (which include your email address and prompt text for auditing) are securely stored in Google Cloud Logging and are automatically purged after 90 days.
• Revoking Access: Because the Application does not permanently store your Drive files, you can instantly stop all future data access at any time. Visit your Google Account Security settings and remove the app's access.