Privacy Policy

Last updated: 2 September 2026

This Privacy Policy describes how Wazuh Audit Upload uses Google user data.

Google data accessed

The application requests the Google Drive drive.file scope. This permission is used to create, read, update, organize, and delete files that the application itself created or that were explicitly made available to it.

Purpose of access

Google Drive access is used solely to store and manage Wazuh security-audit datasets generated by the owner's security-monitoring environment. The application is not intended to scan or manage unrelated personal Drive content.

Data stored

Uploaded datasets may contain security-monitoring information such as Wazuh events, alerts, system inventory, vulnerability information, configuration-assessment results, and related metadata.

Sharing and disclosure

Google user data is not sold. Audit files are stored in the owner's Google Drive and may be shared only with accounts or services that the owner explicitly configures for the security-audit workflow.

Retention and deletion

Audit datasets are intended to be retained for approximately six months. Files older than the configured retention period may be automatically deleted by the audit workflow.

Security

OAuth credentials and access tokens are kept on systems controlled by the owner. Access is limited to the permissions required for the upload workflow.

Google API Services User Data Policy

Use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements where applicable.

Contact

Questions about this application or this policy can be sent to security@rssystems.nl.