Privacy Policy

This Privacy Policy explains how Taraz Technologies ("Taraz", "we", "us") handles information in the Taraz Knowledge Base application (the "Service") — an internal tool that ingests documents into a private, access-controlled knowledge base and lets authorised members search and retrieve them.

1. Who this Service is for

The Service is operated by Taraz Technologies for its own team and invited collaborators. Accounts are created by an administrator; the Service is not offered to the general public and is not used to build advertising profiles.

2. Information we access

2.1 Account information

A username and role for each member, used only to authenticate the person and to enforce who may read which documents.

2.2 Content you provide

Documents, files and images you upload or connect for ingestion, and the knowledge graph (entities, relationships and text passages) derived from them.

2.3 Google user data

When you connect a Google account, the Service uses Google APIs strictly to perform the task you asked it to:

• Google Drive (https://www.googleapis.com/auth/drive): the Service stores the original file of each document it ingests — and the images inside it — into two folders in your Google Drive, and reads those files back so an authorised member can open the source of a retrieved answer. It writes and reads only these asset files and does not modify, delete or organise the rest of your Drive.
• Google Docs: when you ask the Service to ingest a Google Doc, it exports that single document to process its text.
• Account email / profile: used only to identify the account that owns the connected Drive folders.

The Service does not create public "anyone with the link" Drive share links, and never exposes your Google data outside the Service's own access controls.

3. How we use information

• To ingest documents and build the private knowledge graph you search.
• To let you open the original source file of a retrieved passage.
• To enforce access control — every document is readable only by the members its owner has granted.
• To operate, secure, debug and maintain the Service.

We do not use your content or Google data for advertising, for resale, or to train models offered to anyone else.

4. How information is stored and protected

• Data is encrypted in transit (TLS) and at rest on our hosting provider's managed storage.
• OAuth refresh tokens and API keys are additionally encrypted at the application layer before being written to disk.
• Access is restricted to authenticated members and enforced at the database, the query layer, and the mirrors, so a member never sees a document outside their granted audience.

5. Sharing

We do not sell your information and do not share it with third parties for their own purposes. Content is processed by the infrastructure providers that host and power the Service (cloud hosting, database, vector and graph stores, and the language-model providers used to extract structure from documents), solely to deliver the features you use, under their respective terms.

6. Retention and deletion

• You may disconnect a Google account at any time from the Connectors screen; the Service stops accessing it immediately.
• You may revoke the Service's access to your Google account at myaccount.google.com/permissions.
• Deleting a document removes it and its derived graph from the Service; the stored source file is removed with it.
• To request deletion of all data associated with your account, contact us at the address below.

7. Children

The Service is a workplace tool and is not directed to children under 16.

8. Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

9. Contact

Questions or data requests: taraz.automation@gmail.com, Taraz Technologies.