Cloud PBX Google Drive App Privacy Policy

Applies to: Cloud PBX Google Drive, an application developed and operated by Australian Phone Company (ABN details as registered) · Last updated: 18 September 2026

This Privacy Policy explains how the Cloud PBX Google Drive application ("the App", "we", "us", "our") — developed and operated by Australian Phone Company — accesses, uses, stores, and protects information, including information obtained through your Google Account, when you use the App as part of the Australian Phone Company Cloud PBX service.

1. Who we are

Australian Phone Company is an Australian telecommunications provider offering hosted (Cloud) PBX phone systems to business customers. The App is one optional feature of that service, allowing customers to store their Cloud PBX call recordings directly in their own Google Drive.

2. What Google user data we access

When an authorised administrator of a customer organisation connects the App to their Google Account via Google Sign-In / OAuth, we request the minimum Google API scopes necessary to:

• Create a dedicated folder in the connected Google Drive for storing call recordings;
• Upload new call recording files (audio files) generated by the customer's Cloud PBX system into that folder;
• View and manage only the files the App itself has created within that dedicated folder, so that recordings can be organised, renamed, or removed if the customer requests it.

We do not request or access your Gmail, Google Contacts, Google Calendar, or any other files or folders in your Google Drive outside the folder created by the App.

3. How we use this data

• Google Drive access is used solely to deliver the core function of the App: automatically storing your organisation's Cloud PBX call recordings in a Google Drive folder that you control.
• We do not use Google user data to serve advertising of any kind.
• We do not use Google user data to build user profiles for purposes unrelated to providing the App's functionality.
• We do not use Google Workspace or Google user data to develop, improve, or train generalised (non-personalised) artificial intelligence or machine learning models, consistent with Google's API Services User Data Policy, including the Limited Use requirements.

4. Who we share data with

We do not sell, rent, or trade Google user data. We do not transfer or disclose Google user data to third parties, except in the following limited circumstances:

• Service providers: infrastructure providers (e.g. cloud hosting or telephony infrastructure) that process data strictly on our behalf, under contractual confidentiality obligations, solely to operate the Cloud PBX and App;
• Legal requirements: where required to comply with Australian law, a court order, or a lawful request from a government or regulatory authority;
• Business transfer: in connection with a merger, acquisition, or sale of assets, subject to equivalent privacy protections being maintained.

Call recordings uploaded by the App remain within the customer's own Google Drive account; we do not retain a separate copy of recordings once upload to the customer's Google Drive is confirmed, other than transient processing necessary to complete the upload.

5. Data protection and security

• Data in transit between the Cloud PBX system and Google Drive is encrypted using industry-standard TLS encryption.
• Access to the App's systems and any temporary processing storage is restricted to authorised Australian Phone Company personnel on a need-to-know basis.
• OAuth access tokens are stored using encryption at rest and are used only to perform the specific Drive actions described in Section 2.
• Customers can revoke the App's access to their Google Account at any time via their Google Account security settings.

6. Data retention and deletion

• Call recordings stored via the App reside in the customer's own Google Drive and are retained for as long as the customer chooses to keep them there — the customer has full, direct control to view, move, or delete them at any time.
• We retain OAuth connection metadata (e.g. that a connection exists and which Drive folder is linked) only for as long as the integration remains active.
• If a customer disconnects the App or requests account closure, we will delete any such connection metadata and cease all further access to the customer's Google Drive within a reasonable period, and in any event no longer than 30 days.
• To request deletion of data associated with your account, or to ask questions about retention, contact This email address is being protected from spambots. You need JavaScript enabled to view it..

7. Call recording notice — customer responsibility

8. Your choices

• You may disconnect the App from your Google Account at any time.
• You may delete individual recordings or the entire recordings folder directly in Google Drive.
• You may request a copy of, or deletion of, any data we hold about your account by contacting us.

9. Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect changes in our practices or legal requirements. Material changes affecting how Google user data is used will be notified to customer administrators, and the "Last updated" date at the top of this page will be revised accordingly.

10. Contact us

If you have questions about this Privacy Policy or how the App handles your data, contact: