Privacy Policy
Last updated: September 25, 2026
TIRESIAS PanCMB Drive is an internal research utility operated by CMBionics, Inc. for authorized PanCMB research workflows. This policy describes how the application accesses, uses, stores, and shares Google user data.
Google Drive access
The application accesses Google Drive only after authorization by the Google account owner. Depending on the permissions granted, the application may list folders and files, read file metadata or contents, create files and folders, update files, and delete files when required by an authorized research workflow.
How Google user data is used
Google Drive data is used only to support authorized PanCMB research-data operations, including transferring approved public research datasets, maintaining research file organization, checking provenance and integrity, and supporting downstream scientific analysis.
The current OAuth write workflow is intended for approved public research-data acquisition. Patient-identifying information is not intentionally transferred through this public-data acquisition workflow.
Storage and retention
OAuth credentials and refresh tokens are stored locally on the authorized TIRESIAS workstation and are used only to maintain the Google Drive connection. Research files uploaded through the application are retained in the authorized Google Drive data hierarchy according to the research workflow. Temporary local staging copies may be created during transfer or analysis and are removed after successful processing when the workflow specifies temporary staging.
Sharing and disclosure
Google user data is not sold, rented, used for advertising, or shared with unrelated third parties. Data may be processed by authorized local PanCMB/TIRESIAS software components solely to perform the research-data functions described above.
Artificial intelligence and machine learning
Google Workspace user data obtained through this OAuth client is not used to train or improve generalized artificial intelligence or machine-learning models.
Google API Limited Use
TIRESIAS PanCMB Drive's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Revoking access
The Google account owner may revoke the application's access at any time through Google Account permissions. Revocation prevents new Google Drive API access by the application until authorization is granted again.
Changes to this policy
This policy will be updated if the application's use of Google user data materially changes.