Privacy Policy

1. Overview & Controller

Devnivo Wallet (hosted at https://wallet.devnivo.shop/) is a personal finance, multi-account ledger, and productivity command application powered by Cloudflare D1, Cloudflare R2, and Firebase Authentication. For privacy inquiries or deletion requests, contact contact@devnivo.shop.

2. Google User Data Accessed & Purpose

Standard sign-in to Devnivo Wallet uses only Google Sign-In identity scopes. We do not request access to Google Drive files or folders.

• Identity Profile (openid, email, profile): Requested on login strictly to verify your identity, display your active account, and issue an encrypted HttpOnly session cookie.
• Optional Google Tasks (https://www.googleapis.com/auth/tasks): Requested only when you explicitly connect two-way Tasks synchronization inside the Tasks workspace to mirror tasks and due dates.
• Optional Google Calendar (https://www.googleapis.com/auth/calendar.events): Requested only when you explicitly connect two-way Calendar synchronization inside the Calendar workspace to schedule or sync task time blocks.

3. Infrastructure Storage & Security

• Edge Data Storage: Accounts, ledger transactions, tasks, and lightweight metadata are stored directly on Cloudflare D1 SQL database and Cloudflare R2 object storage under wallet.devnivo.shop for ultra-low latency without syncing personal files to Google Drive.
• Security Controls: All requests require HTTPS/TLS and authenticated APIs fail closed (HTTP 401). Session tokens use HMAC-SHA256 verification stored in HttpOnly, SameSite=Lax, Secure cookies. OAuth secrets remain strictly server-side.
• No Sale or Advertising Sharing: We never sell, rent, or share personal information or Google user data with advertisers, data brokers, or third parties.

5. Access Revocation & Data Deletion

You may revoke Google account permissions at any time via Google Account Permissions or request full deletion of stored session/task sync records by emailing contact@devnivo.shop.