Privacy Notice
Your backup stays on your computer. Mash Plugins does not receive the contents of your files or your Google or Microsoft credentials.
1. Data controller
Data controller: Shlomo Rahamim, an individual doing business under the Mash Plugins brand.
Address: Hacienda El Ciervo 27, PH 1, Hacienda de las Palmas, Postal Code 52763, Huixquilucan, State of Mexico, Mexico.
Privacy contact: hello@mashplugins.com
2. Data we process
The application locally processes file names, paths, metadata, and contents; Google or Microsoft authorization tokens; backup settings; and run reports. This data remains on the user's device and is not sent to Mash Plugins.
To purchase and activate Plus, the licensing service processes a random installation identifier, the email address associated with the payment, Stripe identifiers, the amount and currency, payment and license status, and technical timestamps. We do not intentionally request sensitive personal data.
3. Purposes
- Create and update the backup configured by the user.
- Convert native Google files to editable formats when permitted by the provider.
- Process purchases and issue, recover, and validate Plus licenses.
- Prevent fraud, provide support, and comply with legal or tax obligations.
We do not sell personal data, display data-based advertising, or use backup contents for profiling, analytics, or model training.
4. Google and Microsoft
Cloud Sync requests read-only access to list and download authorized files. It does not use this access to upload, move, rename, share, or delete cloud content. Tokens and files are stored locally and do not pass through Mash Plugins servers.
Cloud Sync's use and transfer to any other application of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. We do not transfer Google data to third parties except at the user's direction, as required for a user-visible feature, or when required by law.
5. Service providers and international transfers
Stripe processes payment and banking information under its own privacy notice; Cloud Sync never receives the full card number. Netlify hosts the website and the minimal licensing service. Google and Microsoft process the sign-in and authorization requested by the user. These providers may process data outside Mexico under their own terms and security safeguards.
6. Retention and security
License records are retained for as long as the license exists and for any additional period required for tax obligations, fraud prevention, and the establishment, exercise, or defense of legal claims. Local authorization tokens can be deleted by removing the connected account in Cloud Sync; access can also be revoked from the user's Google or Microsoft security settings. Uninstalling alone may preserve local settings and backups, so users who want complete local removal should revoke access and delete any remaining Cloud Sync data and backup folders. We apply data minimization, encryption in transit, and reasonable access controls.
7. ARCO rights and revocation
You may request access to, rectification, cancellation, or objection to the processing of your personal data (ARCO rights), restrict its use, withdraw consent, or request deletion of license data by emailing hello@mashplugins.com. Please include the email address used for your purchase and describe your request; we will respond within the time limits established by law. You may also revoke access through your Google or Microsoft security settings.
8. Changes
Changes will be posted at this same address together with the updated date. If a material change requires consent, we will request it before applying the new purpose.