Part4Drive Privacy Policy

1. Purpose of Part4Drive

Part4Drive is a multi-tenant enterprise operating system, supply chain clearinghouse, and point-of-sale (POS) network engineered specifically for auto parts merchants, workshops, and commercial fleets across Nigeria, Ghana, and cross-border trade corridors.

The platform allows merchants to maintain verified inventory catalogs with MMYTE (Make, Model, Year, Trim, Engine) compatibility matrices, issue wholesale workshop invoices, and manage distributed store teams.

2. Specific Google User Data Collected via Google OAuth 2.0

When you choose to authenticate using Google Sign-In, we request your consent to access standard, non-sensitive identity attributes:

• openid: Cryptographic token verifying your authentication state.
• https://www.googleapis.com/auth/userinfo.email (Email Address): Used as your unique account identifier to associate your merchant organization, route transactional stock notifications, and deliver critical security alerts.
• https://www.googleapis.com/auth/userinfo.profile (Full Name & Avatar URL): Used solely to personalize your merchant dashboard header and display team attribution on sales logs.

We DO NOT access restricted or sensitive Google APIs. Part4Drive never requests access to your Gmail messages, Google Drive documents, Contacts, Google Calendar, or Photos.

3. How We Use and Protect Google User Data

Google user data is used exclusively to provide direct user-facing features requested by you:

• Creating and securing your merchant organization store profile.
• Validating Role-Based Access Control (RBAC) permissions (Owner, Admin, Inventory Manager, Cashier, Technician).
• Preventing fraudulent takeovers and ensuring audit compliance.

In strict adherence with Google Limited Use requirements:

• We do not transfer your Google user data to third parties, except as strictly required to provide Cloudflare Edge hosting infrastructure, comply with statutory laws, or as part of a corporate merger.
• We never use Google user data to serve personalized advertisements or build marketing profiles.
• Humans do not read your Google user data unless you provide explicit consent to resolve technical support issues or as mandated by court order.

4. Data Storage, Cloudflare Infrastructure & Encryption Standards

All Part4Drive databases, API services, and file storage run on Cloudflare Edge infrastructure (Cloudflare Workers, D1 distributed SQLite, and R2 object storage).

• Encryption in Transit: All web requests require TLS 1.3 encryption with HTTP Strict Transport Security (HSTS).
• Encryption at Rest: All database volumes, session tokens, and merchant catalogs are encrypted with AES-256 at rest.
• Multi-Tenant Isolation: Merchant data is segmented by isolated Organization IDs (e.g. sel_...), preventing cross-tenant access.

5. Data Retention and Account / Data Deletion Instructions

We respect your right to have your data erased at any time:

• Retention Policy: We retain account data only as long as you maintain an active merchant workspace.
• How to Delete Your Data: You can submit a deletion request by sending an email from your registered address to privacy@parts4drive.com or ngisense.inc@gmail.com with the subject line "Delete My Part4Drive Account".
• Revoking Access in Google Account: You can immediately disconnect Part4Drive from your Google account at https://myaccount.google.com/permissions.
• Fulfillment Timeframe: Deletion requests are processed within 30 calendar days, completely removing all personal identifiers, email addresses, and OAuth tokens from our primary databases.

6. Contact Information

For inquiries regarding this Privacy Policy, your rights under the Nigeria Data Protection Act (NDPA), Ghana Data Protection Act (Act 843), or Google API compliance: