Skip to policy
deliver2

Trust and data handling

Deliver2 Privacy Policy

Last updated September 6, 2026

This Privacy Policy explains how Deliver2 collects, uses, stores, and shares information when creators and their clients use our media organization, review, approval, and delivery service.

Information we handle

Deliver2 may process the following information:

  • Account information, such as your name, email address, organization, role, and authentication identifiers.
  • Media and project information, including uploaded photos and videos, filenames, folders, metadata, revisions, comments, approvals, and delivery settings.
  • Service and device information, such as IP address, browser type, request timestamps, security events, and diagnostic logs needed to operate and protect the service.
  • Google account and Drive information described in the Google Drive section below when an authorized administrator connects that integration.

How we use information

We use information to:

  • provide uploads, media processing, organization, review, approvals, galleries, downloads, and delivery;
  • authenticate users, enforce permissions, and prevent abuse;
  • maintain service reliability, investigate failures, and improve performance; and
  • respond to support requests and comply with legal obligations.

Deliver2 does not use customer media or Google user data for targeted advertising.

How Deliver2 uses Google Drive

Deliver2 accesses Google Drive only after authorization by the administrator responsible for the connected Shared Drive. A private service account stores and manages Deliver2 media in the administrator-selected Shared Drive and root folder.

To provide media storage and delivery, Deliver2 may access the authorized account email, Shared Drive and folder identifiers, file content, filenames, file identifiers, checksums, sizes, content types, and other Drive metadata. Deliver2 uses its Drive permission to create, read, update, move, and delete media and folders as required by actions in the service. It does not scan unrelated Drive content for advertising, profiling, or data brokerage.

Service-account credentials are kept in protected credential files available only to restricted service processes and authorized operators. Short-lived access tokens are held in memory by the storage service. Temporary local copies may be created for upload staging, media processing, and delivery performance, then removed according to operational retention limits.

Deliver2 does not sell Google user data. Deliver2 does not transfer Google user data to advertising platforms or use it to train generalized artificial intelligence or machine learning models. The use and transfer of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How information is shared

We share information only when needed to:

  • show media and project activity to creators, team members, clients, and recipients authorized through Deliver2;
  • use infrastructure, authentication, monitoring, and other service providers that process information on our behalf under appropriate confidentiality and security obligations;
  • comply with applicable law, a valid legal request, or protect users, Deliver2, and the public from harm; or
  • complete a business transaction, subject to appropriate notice and protection of the information involved.

We do not sell personal information or Google user data.

Retention and your choices

We retain account, project, and media information while it is needed to provide Deliver2, meet security and legal obligations, resolve disputes, and enforce agreements. Retention periods vary by the type of information and the reason it is processed.

The Shared Drive administrator can revoke Deliver2 access by removing the service account's access to that drive. Existing cached media may remain available under Deliver2's access controls and retention limits. Revocation does not automatically delete information already stored in Deliver2 or files already written to the connected Shared Drive. To request access, correction, export, or deletion of personal information, contact us using the address below. We may need to verify the request before acting on it.

Security

We use administrative and technical safeguards designed to protect information, including encrypted network connections, restricted credentials, access controls, and service monitoring. No storage or transmission method is completely secure, so we cannot guarantee absolute security.

Children

Deliver2 is a professional service and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy as Deliver2 changes. We will publish the revised policy here and update the date at the top of the page. Material changes may also be communicated through the service or by email when appropriate.

Contact

Questions or requests about this policy and Deliver2 data practices can be sent to greevenkendall@gmail.com.