PAYAG privacy policy

1. Information we process

Google sign-in. PAYAG receives your verified email address, Google account identifier and short-lived identity-token claims used to authenticate you. It requests only openid and email. You enter your Google password directly with Google in your browser; PAYAG does not receive that password. The desktop keeps its identity token in session memory and does not persist Google access or refresh tokens.

Business inventory. The app processes domain names, business-contact email addresses, currencies, prices, domain ratings, traffic metrics, notes and other fields from the designated organizational inventory worksheet. Domain searches and bulk-check lists are sent to the private backend to return results.

Accountability and recovery. Added by, change audit and role-management records identify the authenticated person responsible for the action. Operation identifiers and coordination records help resolve interrupted saves and prevent conflicting or duplicate writes. The desktop stores pending-operation identifiers locally for recovery.

Operational information. Infrastructure services may process IP addresses, request timing, status codes, security events and other technical metadata to deliver, secure and troubleshoot the service. Do not place passwords or unrelated sensitive personal information in inventory notes.

2. How information is used

Information is used to authenticate invited users, enforce app roles, provide inventory search and editing, verify saves, prevent conflicting writes, maintain audit records, support recovery and investigate security or reliability issues.

Google sign-in information is used for authentication, access control and accountability within PAYAG. It is not sold, used for advertising or used to train AI models. The desktop does not request access to a team member’s personal Gmail, Drive or Sheets files.

3. Who can access it

Authorized team members can view inventory results according to their app role. Editors can add and edit contacts; Viewers can search and bulk check. Only the Owner manages app roles. Staff access to PAYAG does not grant direct Sheets access, cloud-project administration or access to protected backups.

The private backend uses a separately authorized service identity to access the designated organizational worksheet. The operator and authorized administrators may access records when needed to support the service, manage access, review changes, recover data or investigate security issues.

Google provides sign-in, Sheets and cloud infrastructure. Information needed for these functions is processed through those services. PAYAG’s backend and designated protected-storage resources are configured in Google’s Taiwan region, asia-east1; this does not mean all Google services, diagnostic systems or processing activities are restricted to Taiwan.

4. Storage and security

Inventory is stored in the designated Google Sheet. Coordination, access-role and operation records are stored in the private backend database. Protected audit records and approved backup archives are encrypted. The backend requires authenticated invocation and checks each person’s current app role.

Google identity tokens are used over encrypted connections. Disconnecting Google in PAYAG clears the app’s active identity session. The app does not store Google passwords or persist refresh tokens.

5. Retention

Inventory and operational records are retained to support the team’s work, auditability and recovery. Protected backup objects currently have a 93-day minimum retention; protected audit objects have a 185-day minimum retention.

These are minimum protection periods, not automatic deletion dates. Records can remain longer until the operator applies an approved retention or deletion procedure. Removing app access does not erase earlier inventory changes or protected audit records.

6. Your choices and requests

Contact your PAYAG administrator through your internal team channel to request an inventory correction, removal of app access, or review or deletion of personal information associated with your account. Include enough information to identify the request; do not send passwords, identity tokens or authorization codes.

The operator will review requests in light of the information involved, configured retention protections and organizational recordkeeping requirements. A request may not permit immediate deletion of retained audit or backup records. The operator can explain what can be corrected or removed and what must remain protected.

You can disconnect Google in PAYAG and manage the app’s connection through your Google account settings. Disconnecting or revoking sign-in does not delete the organizational inventory or its audit history. The Owner can revoke your PAYAG role and private-group membership.

7. These Squarespace information pages

The PAYAG information pages are hosted on the existing leocorado.com Squarespace website. Squarespace processes connection information such as IP address, browser and device details, page visits and request metadata to deliver, secure and measure use of the website. The site uses Squarespace analytics and may set essential and analytics cookies. Your browser’s cookie settings can be used to manage or block cookies; doing so may affect website functions.

These pages do not provide public app sign-in, inventory search or installer downloads. The PAYAG pages add no advertising scripts, external embeds or inventory connection. Other pages and shared features on leocorado.com may have their own forms, analytics or links.

For information about Squarespace’s processing, see Squarespace’s privacy policy. Contact the operator with questions about website information or cookie handling.

8. Policy updates

Material changes to how PAYAG uses Google user data will be disclosed before the new use begins, with new consent where required. An updated policy will identify its revision date. For questions about this policy or the service, contact your PAYAG administrator through your internal team channel.