Privacy Policy | Proofdesk by Headsir

1. Introduction

Welcome to ProofDesk by Headsir (accessible at proofdesk.headsir.in and headsir.in/proofdesk), developed and operated by Headsir(“we”, “our”, or “us”).

ProofDesk is a privacy-first transcription, proofreading, and document editing workspace with optional AI-powered assistance. We are deeply committed to respecting and protecting your privacy. This Privacy Policy outlines what information we process, how Google user data is handled via the Google Drive App Data integration, and your rights concerning your data.

2. Local Storage Architecture & Data Transmission

ProofDesk is built with a privacy-first, client-centric storage architecture. Here is how your data is handled between your local device and online services:

Local Document Storage (IndexedDB):Text that you type, paste, or proofread, along with your high-resolution scanned source files (PDFs/images), is stored directly on your device inside your browser's local IndexedDB and local file system. We do not store or host your documents on any centralized Headsir database.
Spellchecking & Sanitization APIs: To provide accurate Assamese morphological checking, hyphenated word recognition, and text sanitization, text tokens are transmitted to our linguistic processing API over encrypted HTTPS. These tokens are processed in-memory solely for immediate proofreading verification and are never permanently stored, indexed, or shared.
Optional AI Proofreading (Gemini API):If you choose to enable AI-powered proofreading using your own Google Gemini API key, selected text excerpts are sent directly to Google's Gemini API in accordance with Google's API Terms of Service.
Custom Dictionaries & Preferences: Custom spellcheck words, zoom settings, and layout preferences are saved exclusively in your local browser storage.

3. Google Drive Integration & Google API User Data Policy

To allow you to securely backup and synchronize your ProofDesk projects across different computers, ProofDesk provides an optional integration with Google Drive.

A. Google OAuth Scope Requested

ProofDesk explicitly requests access only to the following restricted Google OAuth scope:

https://www.googleapis.com/auth/drive.appdata

(View and manage its own configuration and application data in your Google Drive)

B. Strict Isolation — No Access to Your Other Drive Files

The drive.appdata scope is a special, hidden sandbox designated solely for ProofDesk.

ProofDesk CANNOT access, view, search, list, read, or modify any files, documents, sheets, photos, or folders in your personal Google Drive.
ProofDesk can ONLY access the specific files that ProofDesk itself creates inside its private Application Data folder (namely your .hdsr project files and sync snapshots).

C. Google API Limited Use Disclosure

“ProofDesk's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.”

D. Restrictions on Google User Data Handling

No Sale of Data: We will never sell your Google user data or document contents to any third parties, brokers, or affiliates.
No Advertising: We do not use or transfer Google user data for serving advertisements, including personalized, retargeted, or interest-based ads.
No AI/ML Model Training: We do not use Google user data or proofreading texts to train generalized artificial intelligence or machine learning models.
No Human Review: Human beings are prohibited from reading your Google user data or synchronized documents, except where you provide explicit written consent for technical troubleshooting, where required by law, or to investigate security emergencies.

4. Data Retention & Revocation of Google Access

You maintain complete authority over your data and cloud connections:

Disconnecting Google Drive: You can disconnect Google Drive sync at any time directly within ProofDesk or by visiting your Google Account Third-party Access Management.
Data Deletion: If you delete a project inside ProofDesk, the corresponding data stored in your local browser and your Google Drive App Data folder is permanently deleted.
Local Browser Storage: You can clear your browser storage (IndexedDB) at any time to remove all locally cached ProofDesk data.

5. Data Security

We implement industry-standard administrative, technical, and physical safeguards:

All communications with Google Drive APIs and web assets are strictly encrypted in transit via HTTPS/TLS.
Google OAuth 2.0 authorization tokens are stored securely in browser storage and are never transmitted to third parties.
We perform regular code audits to prevent security vulnerabilities and ensure privacy compliance.

6. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legal obligations. Any updates will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically.

7. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please reach out to our dedicated privacy and support team:

Headsir Support & Privacy

support@headsir.in

ProofDesk Privacy Policy