SiteFerry privacy policy.
How SiteFerry uses your Google Drive when you connect it, and how to take that access back.
Last updated:
About SiteFerry
SiteFerry is a WordPress backup and migration plugin made by Xsofty (Private) Limited. It runs on your own WordPress site. If you connect it to Google Drive, it uses Google’s “drive.file” permission.
What SiteFerry accesses in your Google account
- Your Google account's email address, shown on your site's SiteFerry page so you know which account is connected.
- Only the files and folders SiteFerry creates in your Google Drive, and the one folder you choose for it with Google's folder picker. SiteFerry cannot see, read or change any other file in your Drive.
How SiteFerry uses that access
- It uploads your site's backup files, lists them, downloads one when you restore your site, and deletes backups when you ask, or when a schedule you set on your site removes older ones.
- It does this only to provide the backup features you turned on. It does not use your Drive data for advertising, does not sell it, and does not let people read it.
Where your data is kept
- Your backup files go directly between your WordPress site and your Google Drive. They never pass through Xsofty's servers.
- The sign-in keys Google gives SiteFerry (access and refresh tokens) are stored on your own WordPress site, encrypted. Xsofty does not receive or keep them.
- To sign in with one click, your browser passes through Xsofty's sign-in service at auth.xsofty.com. It adds SiteFerry's app credentials to the sign-in and, while your site works with Drive, forwards your site's requests to renew its access. It stores nothing. If the web server keeps access logs, they hold the request addresses only (your site's admin address and a one-time code that expires within minutes), never your tokens or files.
Sharing
Xsofty does not share, transfer or sell data from your Google account to anyone.
Removing access and data
- Click "Disconnect" or "Remove these settings" on SiteFerry's Storage tab: SiteFerry revokes its access and deletes its keys from your site. Deleting the plugin removes them too.
- You can also remove SiteFerry’s access at any time at myaccount.google.com/permissions.
- Backups already stored in your Drive stay there until you delete them.
Google API Services User Data Policy
SiteFerry’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Contact
Questions about SiteFerry and your data: hello@xsofty.com.
Questions about SiteFerry and your data?